Data Processing Agreement

This Data Processing Agreement (“DPA”) forms part of the Terms of Service between you (“Customer”) and AdNexus AI. For personal data processed on the Customer's behalf, the Customer acts as the data controller and AdNexus AI acts as the data processor. AdNexus AI processes such data only on the Customer's documented instructions.

The subject matter is the provision of the AdNexus AI service. Processing continues for the duration of the agreement and any agreed retention period thereafter, after which data is deleted or returned per Section 7.

AdNexus AI processes campaign data, performance metrics, audience data, and account information to deliver AI-assisted advertising management, reporting, and optimization features as described in the service documentation.

AdNexus AI implements appropriate technical and organizational measures, including encryption of data in transit and at rest, least-privilege role-based access control, audit logging of mutating actions, encrypted storage of platform access tokens, and regular review of access and security practices.

The Customer authorizes AdNexus AI to engage sub-processors to deliver the service. AdNexus AI remains responsible for the performance of its sub-processors' obligations. A current list of sub-processors is available on request, and AdNexus AI will provide notice of intended changes, giving the Customer the opportunity to object on reasonable grounds.

Where personal data is transferred outside its region of origin, AdNexus AI relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms recognized under applicable law.

Upon termination of the service, AdNexus AI will, at the Customer's choice, delete or return all personal data processed on the Customer's behalf, unless retention is required by law.

AdNexus AI will provide reasonable assistance to the Customer in responding to data subject requests and in meeting the Customer's obligations regarding security, breach notification, and data protection impact assessments.

AdNexus AI will notify the Customer without undue delay after becoming aware of a personal data breach affecting the Customer's data, and will provide information reasonably necessary for the Customer to meet its notification obligations.

To execute a countersigned DPA for your organization, contact legal@adnexus.ai.