Ternivo Connect Data Processing Addendum
1. Roles and scope
For Customer Personal Data that Customer submits to Ternivo Connect or instructs Ternivo to process, Customer acts as controller/business and Ternivo acts as processor/service provider unless applicable law assigns different roles. Social networks may act as independent controllers for data they receive directly under their own terms.
2. Processing instructions
Ternivo will process Customer Personal Data only to provide, secure, support, troubleshoot and improve Ternivo Connect in accordance with Customer's documented instructions, the applicable order, the Connect Terms and applicable law.
3. Processing details
- Subject matter: social account connection, content delivery, scheduling, verification, diagnostics, analytics, engagement, automation and related support.
- Duration: the subscription term plus limited retention required for security, dispute resolution, legal obligations and backup lifecycle.
- Data subjects: Customer users, authorized social-account users, people interacting with Customer's authorized social accounts, and contacts supplied by Customer.
- Data types: names, business emails, account identifiers, social handles/IDs, OAuth authorization metadata, content/media, comments/messages/mentions where enabled, delivery logs, usage records and support information.
4. Confidentiality and access
Ternivo will limit access to Customer Personal Data to personnel and contractors who need it to provide or secure the service and who are subject to confidentiality obligations.
5. Security measures
Ternivo maintains reasonable technical and organizational measures appropriate to the service, including authenticated access controls, organization/workspace isolation, encrypted network transport, server-side provider credential handling, scoped service identities, hashed Ternivo service credentials where supported, audit records, idempotency controls and restricted administrative credentials. Additional details are available in the Connect Security Overview.
6. Subprocessors
Customer authorizes Ternivo to use subprocessors reasonably necessary to provide the service. Core infrastructure may include Supabase for database/authentication/storage/functions, Vercel for web hosting and application delivery, Stripe for subscription billing, and AI infrastructure providers when Customer invokes AI-enabled features. Social platforms receive data when Customer directs Ternivo to act on those platforms and are generally governed by their own terms.
7. Data-subject requests
Taking into account the nature of processing, Ternivo will provide reasonable assistance to Customer with requests to access, correct, delete, restrict or export Customer Personal Data when Customer cannot reasonably fulfill the request through available product controls.
8. Security incidents
Ternivo will notify Customer without undue delay after confirming a security incident involving Customer Personal Data and will provide information reasonably available to support Customer's legal obligations. Notice will not be treated as an admission of fault or liability.
9. Deletion and return
On termination or a valid Customer request, Ternivo will delete or return Customer Personal Data from active systems where reasonably feasible, except data that must be retained for legal, security, fraud-prevention, dispute-resolution or backup-lifecycle purposes. Published content may remain on social platforms until removed there.
10. International processing
Customer acknowledges that Ternivo and its subprocessors may process data in the United States and other jurisdictions where they operate. Where required, the parties will use a lawful transfer mechanism appropriate to the applicable jurisdiction.
11. U.S. state privacy terms
Where a U.S. state privacy law applies and Ternivo acts as Customer's service provider/processor, Ternivo will not sell or share Customer Personal Data for cross-context behavioral advertising and will not retain, use or disclose it outside the business purposes described in the agreement except as permitted by law.
12. Audit information
On reasonable written request and subject to confidentiality protections, Ternivo will provide information reasonably necessary to demonstrate compliance with this DPA. During private beta, the parties will first use documentation, questionnaires and available security materials before considering a more intrusive audit.
13. Order of precedence
If this DPA conflicts with the Connect Terms or Order Form on data-processing obligations, this DPA controls for that conflict. All other contract terms remain unchanged.
14. Contact
Privacy: privacy@ternivo.app
Security: security@ternivo.app