Data Processing Addendum (DPA)

This Data Processing Addendum (“DPA”) describes how we process personal data on behalf of merchants using the Pickup & Delivery Manager app (the “App”).

1. Roles

Merchant is the Controller (or Business). We are the Processor (or Service Provider) processing personal data solely to provide and support the App.

2. Data we process

Order and customer data necessary to schedule delivery/pickup (e.g., order ID, contact, address, delivery date/time window, internal notes). We do not sell personal data.

3. Security

We maintain reasonable administrative, technical, and organizational measures to protect personal data (access controls, logging, and secure hosting).

4. Subprocessors

We may use subprocessors (e.g., hosting providers) to operate the App. We remain responsible for their performance under this DPA.

5. Data retention

We retain data only as needed to provide the App and comply with legal obligations. Merchants can request deletion by uninstalling the app or contacting support.

6. Contact

For DPA questions, contact the merchant support channel you provided during installation.