Data Processing Addendum

Roles

For customer analytics data, the customer is generally the controller and OpenRevenue acts as a processor or service provider, processing data according to the customer's instructions and the agreement.

For account, billing, security, and service administration data, OpenRevenue may act as an independent controller where required to operate and protect the service.

Processing instructions

OpenRevenue processes customer data to provide analytics, realtime dashboards, visitor journeys, reports, API access, performance monitoring, support, billing, security, and related platform functionality.

Customer configuration in the dashboard, API usage, installed scripts, and written instructions form the customer's processing instructions.

Categories of data

Processed data may include project domain, paths, referrers, device and browser details, approximate geolocation, timestamps, anonymous visitor and session identifiers, event names, and performance signals.

Customers should not send special category data, highly sensitive data, payment card data, credentials, or direct identifiers unless OpenRevenue has explicitly agreed in writing.

Confidentiality and security

OpenRevenue restricts access to customer data to personnel and subprocessors who need access to provide, maintain, secure, and support the service.

OpenRevenue applies reasonable technical and organizational measures appropriate to the nature of the processing and the risks involved.

Subprocessors

The customer authorizes OpenRevenue to use subprocessors for hosting, storage, database, email, payments, monitoring, and operational services.

OpenRevenue remains responsible for subprocessors' processing of customer data to the extent required by applicable data protection laws.

Assistance and deletion

OpenRevenue will provide reasonable assistance for data subject requests, security obligations, and compliance inquiries where required by law and reasonably possible through the service.

After termination, OpenRevenue will delete or anonymize customer data according to its retention practices, unless retention is required by law, security, dispute resolution, or legitimate business needs.

International transfers

If customer data is transferred internationally, OpenRevenue will rely on appropriate safeguards where required, such as standard contractual clauses or other lawful transfer mechanisms.