Data Processing Addendum

This page describes the substance of the Data Processing Addendum ("DPA") that marketsync global ltd (as processor) offers customers of ops.bd (as controller). The executable DPA is provided on request to legal@ops.bd.

Processing of customer personal data solely to provide the ops.bd service, for the duration of the customer's subscription plus any retention window agreed in writing.

Storing tenant configuration, executing workflows, generating agent recommendations, delivering notifications, and maintaining logs required for operational support and security.

End users of the customer's account, and any data subjects referenced within workflow inputs or connector payloads. Categories: identifiers, contact data, workflow content, and operational metadata. Sensitive categories are not required and should not be sent to the service.

We: (a) process only on documented instructions from the customer; (b) impose confidentiality on personnel; (c) maintain appropriate technical and organizational measures (see /security); (d) engage subprocessors only under written terms no less protective than this DPA; (e) assist with data-subject requests and breach notifications; (f) delete or return personal data on termination.

The current list is at /legal/subprocessors. We provide advance notice of changes; customers may object on reasonable grounds.

Where personal data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

Customers may request evidence of compliance annually. On-site audits are available to enterprise customers under reasonable notice and confidentiality terms.

A countersigned DPA is available on request. Please email legal@ops.bd with your legal entity name and jurisdiction.