Data Processing Addendum

For customer site visitor data processed through hosted sites, the customer is generally the controller and LayoutPages acts as a processor or service provider for the services described in the agreement.

LayoutPages is independently responsible for data it processes for its own purposes, such as account administration, billing, fraud prevention, platform security, analytics about the platform itself, and legal compliance.

LayoutPages processes customer data only on documented customer instructions as reflected in the customer agreement, product configuration, and lawful support or maintenance requests.

We implement reasonable technical and organizational measures appropriate to the service and will provide reasonable assistance, taking into account the nature of the processing, for customer responses to data-subject requests and certain security or compliance obligations.

When a customer enables creator monetization, their Stripe Connect Express account is created and administered directly between the customer and Stripe. Stripe is the controller of identity, business, and tax information collected during onboarding and is the processor of payment instrument data for buyers.

LayoutPages processes a limited set of monetization metadata on the customer's behalf: Connect account identifier, charge and payout enablement flags, offer/template definitions, sale amounts, application-fee amounts, sale status, and the access tokens needed to fulfil digital deliveries. We do not access buyers' full payment instruments. Refunds, chargebacks, and tax reporting are handled between the customer and Stripe.

Current core subprocessors are listed on the Subprocessors page. Where international transfer mechanisms or customer-specific terms are required, they should be addressed in a signed order form or negotiated DPA rider.

Questions or customer DPA requests can be sent to [email protected].