Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the agreement between you ("Customer," "Controller") and Snyho ("Processor," "we," "us") governing Processing of Personal Data when you use the Snyho services ("Services"). Where Individual Agreements reference this DPA, this document supplements those terms for data protection compliance where applicable (including GDPR where relevant).

1. Definitions

Capitalized terms not defined herein have the meanings in applicable Data Protection Laws or the underlying Terms of Service. "Personal Data," "Processing," "Controller," "Processor," "sub-processor," and "Data Subject" carry the meanings ascribed under GDPR or equivalent statutes.

2. Roles

Customer acts as Controller (alone or jointly) for Personal Data it submits to the Services in connection with its end users, subscribers, or workforce. Snyho processes such Personal Data solely as Processor on documented instructions from Customer—unless applicable law requires otherwise, in which case Snyho shall inform Customer of that legal requirement before Processing, unless prohibited.

3. Details of Processing

• Subject matter: provision of the Snyho platform for content operations, publishing integrations, and related features ordered by Customer.
• Duration: for the term of the Services agreement and thereafter as required for backups, legal retention, or secure deletion per Section 8.
• Nature and purpose: hosting, authentication, transmission of content and commands to integrated third-party platforms when initiated by Customer, customer support, security monitoring, and service improvement consistent with the Privacy Policy.
• Categories of data subjects:Customer's authorized users, and where applicable individuals whose data Customer publishes or synchronizes through the Services (as determined by Customer's use).
• Categories of Personal Data: identifiers (e.g., name, email), account credentials and tokens supplied for integrations, usage metadata, and content Customer chooses to process through the Services.

4. Customer instructions

Customer instructs Snyho to Process Personal Data to deliver the Services in accordance with the agreement, applicable product documentation, and Customer's configuration choices (including connected destinations). Customer is responsible for the lawfulness of instructions and for notices/consents toward its own users and data subjects.

5. Confidentiality & personnel

Snyho ensures that persons authorized to Process Personal Data are bound by confidentiality obligations or statutory duties of confidentiality.

6. Security measures

Snyho implements appropriate technical and organizational measures designed to protect Personal Data, including measures referenced in our Security overview (encryption in transit, access controls, vulnerability management). Customer acknowledges that security is a shared responsibility and shall configure integrations responsibly.

7. Sub-processors

Customer generally authorizes Snyho to engage sub-processors to support infrastructure, communications, payments, or AI inference—subject to comparable data protection obligations by contract. An up-to-date list or notice mechanism is described in our Privacy Policy; Customer may object to new sub-processors where legally permitted, following the process stated therein.

8. Data Subject requests & assisted compliance

Where feasible, Snyho assists Customer—via self-service tools or support channels—in responding to requests from Data Subjects exercising rights under Data Protection Laws. If Snyho receives a request directly, it shall redirect the requestor to Customer unless legally compelled otherwise.

9. Breach notification

Snyho shall notify Customer without undue delay after becoming aware of a Personal Data breach affecting Customer data in Snyho's sphere of responsibility, and shall provide information reasonably necessary for Customer to meet regulatory timelines, where such information is available.

10. Deletion or return

Upon termination or upon Customer's written request, Snyho shall delete or return Personal Data in line with the Services functionality and backup cycles, except where retention is required by law.

11. Audits & demonstrations

Snyho shall make available information reasonably necessary to demonstrate compliance and allow for audits (including inspections) by Customer or its mandated auditor, subject to confidentiality, reasonable scheduling, and industry standards—often satisfied via questionnaires and third-party attestations where available.

12. International transfers

Where Personal Data originating in the EEA, UK, or Switzerland is transferred globally, Snyho implements appropriate safeguards (such as Standard Contractual Clauses and supplementary measures where required).

13. Liability

Liability caps and exclusions in the main Services agreement apply to this DPA, except where prohibited by applicable Data Protection Laws.

14. Contact & communications

For questions about this DPA, data processing, subprocessors, or to initiate procurement or signature workflows, email support@snyho.com. This is the official channel for legal, privacy, and enterprise inquiries relating to this Agreement and the Privacy Policy.

This page summarizes standard processor commitments for procurement discussions. For executable signatures, entity-specific schedules, or jurisdictional addenda, email support@snyho.com with subject line "DPA execution" or use our Contact page. Also read our Privacy Policy.