This Data Processing Addendum is part of the Terms of Service between your business and Webytag Technologies LLC. It applies when ClientCee processes personal data on your behalf, and it needs no signature: you accept it with the Terms.
Roles
Your business is the controller of the personal data in its workspace: it decides why and how that data is used. Webytag Technologies LLC is the processor: we process that data only to provide ClientCee to you.
What we process
- People: your leads, clients and their contacts, your staff, and the people you give client-portal access.
- Data: names, contact details, business records, invoices, files, notes and messages that you store in or send through ClientCee.
- How long: while you use ClientCee, and for 30 days after your subscription ends.
Your instructions
We process the data only to provide ClientCee and as you instruct us through using it, unless the law requires otherwise. If we think an instruction breaks data protection law, we tell you.
Confidentiality
Everyone at Webytag Technologies LLC who can access workspace data is bound to keep it confidential and only accesses it when needed to provide or support ClientCee.
Security measures
We protect the data with encryption in transit, encryption at rest for credentials and tokens, hashed passwords, emailed sign-in codes and authenticator apps, role-based access, separation between workspaces, a firewall, and daily backups kept for 14 days.
Sub-processors
You allow us to use the sub-processors listed on the Sub-processors page (https://clientcee.com/subprocessors). We hold each of them to data protection terms that protect the data at least as well as this addendum. Before we add a new one, we email the workspace owner. If you object on reasonable data protection grounds, tell us; if we cannot address your concern, you may cancel.
Helping you
We help you, as far as is reasonable, to answer requests from people whose data you hold, and with security reviews and data protection impact assessments that concern ClientCee.
Breaches
If we become aware of a personal data breach affecting your workspace, we tell you without undue delay, with the information you need to meet your own obligations.
When you leave
We delete workspace data 30 days after your subscription ends, unless you ask for an export first or the law requires us to keep part of it. Backups roll off within 14 days after that.
Information and audits
On request, we give you the information you reasonably need to show that we meet this addendum.
International transfers
Workspace data is stored in the United States. Where EU, UK or Swiss data protection law applies to a transfer, the European Commission's Standard Contractual Clauses (Module 2, controller to processor) and the UK International Data Transfer Addendum apply and form part of this addendum, with your business as the data exporter and Webytag Technologies LLC as the data importer. The details in this addendum complete their annexes.
Contact
Questions about this addendum: support@clientcee.com.