Data Processing Addendum

1. Roles of the parties

For customer personal data submitted to TickerChats by or on behalf of the customer, the customer acts as the controller and TickerChats acts as the processor, unless the parties expressly agree that TickerChats acts in another legally defined capacity for a specific workflow.

TickerChats is operated by Wexrowe Integrated Solutions LLC, 32 N Gould Street, WY 82801, Wyoming, United States of America.

2. Subject matter and duration

Processing covers the hosting, storage, organization, retrieval, transmission, security, backup, support, and deletion of customer personal data for the duration of the customer's use of the service and any limited post-termination retention period required for backup rotation, security, legal compliance, or documented deletion processes.

3. Categories of data and data subjects

• Data subjects may include customer employees, project participants, contractors, candidates, guests, newsletter subscribers, and support contacts.
• Data may include contact details, account identifiers, role information, project collaboration records, uploaded attachments, timestamps, message content, meeting records, and technical security logs.
• Customers are responsible for determining whether special-category or highly regulated data is appropriate for the service and for configuring the service accordingly.

4. Processor obligations

• Process personal data only on documented customer instructions unless required otherwise by law.
• Ensure personnel with access to customer personal data are bound by confidentiality obligations.
• Implement technical and organizational measures appropriate to the risk profile of the hosted service.
• Assist the customer, taking into account the nature of the processing, with data-subject requests and security incident response where reasonably possible.

5. Subprocessors

TickerChats may engage subprocessors for storage, email delivery, payment processing, anti-abuse checks, AI-assisted workflows, integrations, maps, or other supporting functions. TickerChats maintains a current subprocessor list on the Subprocessors page and remains responsible for ensuring those subprocessors are bound by data-protection obligations appropriate to the services they provide.

6. Security incident response

If TickerChats becomes aware of a confirmed security incident affecting customer personal data processed under this DPA, TickerChats will notify the customer without undue delay after verification and provide available information reasonably necessary for the customer to assess the impact and meet notification obligations.

7. Return and deletion

Following termination, the customer should export needed data before service access ends. After the applicable retention and backup rotation periods expire, TickerChats may delete remaining customer personal data unless longer retention is required by law, security needs, or a written preservation instruction agreed by the parties.