1. Parties
Processor
OneChannelAdmin LLC, 8 W Darlington Ave, Kissimmee, FL 34746, Florida, USA.
Controller
Customer identified under the applicable agreement.
Legal
OneChannelAdmin Data Processing Addendum (DPA)
This Data Processing Addendum forms part of the agreement between OneChannelAdmin LLC and the applicable customer entity. It applies when Company processes Personal Data on behalf of Customer in connection with the Services.
If conflict exists between this DPA and another agreement regarding Personal Data processing, this DPA controls.
2. Definitions
Applicable Privacy Laws
Applicable privacy and data protection laws including where relevant:
- GDPR
- UK privacy requirements
- CCPA
- CPRA
- PIPEDA
- LGPD
- applicable regional laws
Personal Data
Information relating to an identified or identifiable person.
Processing
Any operation performed on Personal Data including collection, storage, use, transmission, deletion, disclosure, restriction, retrieval, analysis, organization, and destruction.
Customer Data
Information submitted, synchronized, uploaded, generated, or processed through the Services.
- customers
- orders
- inventory
- pricing
- transactions
- support records
- AI inputs
Subprocessor
Third-party provider engaged to process Personal Data in support of Services.
Security Incident
Unauthorized access, disclosure, alteration, destruction, loss, or compromise of Personal Data.
3. Processing Scope
Company processes Personal Data solely to:
- provide Services
- maintain platform operations
- operate integrations
- execute workflows
- provide support
- secure infrastructure
- operate AI functionality
- monitor reliability
- comply with legal obligations
- follow Customer instructions
Processing scope depends on enabled Services.
4. Roles
Customer acts as:
- Controller
- Business
- or equivalent legal role
Company acts as:
- Processor
- Service Provider
- or equivalent legal role
Customer remains responsible for:
- lawful collection
- permissions
- consent
- instructions
- accuracy of submitted data
5. Processing Instructions
Company processes Personal Data only:
- under documented Customer instructions
- to fulfill agreement obligations
- to provide Services
- where required by law
Customer authorizes processing necessary to operate and secure Services.
6. Categories of Data
Categories may include:
- Account Data
- Operational Data
- Customer Records
- Transaction Data
- Technical Data
- AI Data
- Support Data
Actual processing depends on enabled functionality.
7. Data Subjects
Data may relate to:
- customers
- employees
- contractors
- administrators
- suppliers
- buyers
- operators
- business contacts
8. AI Processing
Company may process Personal Data through AI-enabled functionality where Customer enables or uses AI features.
AI functionality may include:
- automation
- recommendations
- summarization
- content generation
- workflow execution
- analytics
Customers remain responsible for validating AI outputs.
AI outputs may not always be accurate or complete.
Third-party AI providers may process requests as described in the Subprocessors List.
9. AI Training and Service Improvement
Customer Data is not automatically used to train shared AI foundation models by default.
By default, Personal Data processed through AI functionality is used only to:
- provide requested AI functionality
- generate outputs
- execute workflows
- monitor reliability
- maintain security
- support troubleshooting
- maintain auditability
- comply with Customer instructions
Company may use limited operational, aggregated, anonymized, and diagnostic information to improve platform performance, reliability, security, and service quality.
Where supported and permitted by law, Customer may elect to enable optional functionality or provide written authorization allowing selected information to support:
- AI feature improvement
- workflow optimization
- quality enhancement
- evaluation
- service improvement
Enterprise Customers may request controls where available including:
- tenant isolation
- AI restrictions
- provider restrictions
- custom retention
- approval workflows
Customer ownership of Customer Data remains unchanged.
10. Security Measures
Company maintains reasonable technical and organizational safeguards.
Administrative
- access controls
- training
- confidentiality
Technical
- encryption at rest
- encryption in transit
- RBAC
- MFA
- logging
- monitoring
Operational
- backups
- testing
- incident response
Controls may evolve.
11. Personnel
Company limits access to authorized personnel subject to confidentiality obligations.
Access follows business need.
12. Subprocessors
Customer authorizes use of subprocessors.
Categories may include:
- cloud
- database
- AI
- payments
- monitoring
- analytics
- storage
- backup
Current providers appear in the Subprocessors List.
Company remains responsible for subprocessors to the extent required under applicable agreements.
13. International Transfers
Services may process information in:
- United States
- Europe
- Canada
- Mexico
Transfers may rely on:
- contractual safeguards
- organizational controls
- approved transfer mechanisms
14. Assistance
Company may reasonably assist Customer regarding:
- access
- correction
- deletion
- portability
- objections
- security obligations
Assistance depends on technical capability and agreement scope.
15. Incident Response
Company maintains incident response procedures.
Company may:
- investigate
- contain
- remediate
- notify
- preserve evidence
- improve controls
Timing depends on legal obligations and circumstances.
16. Audit Rights
Customer may request reasonable information.
Company may respond through:
- security summaries
- questionnaires
- compliance documentation
- subprocessor information
Requests must be reasonable and non-disruptive.
17. Data Retention
Retention follows the Data Retention Policy.
Examples
- Orders: Up to 7 years
- Operational Records: Subscription term plus up to 12 months
- Logs: Up to 12 months
- Security Logs: Up to 18 months
- AI Data: Up to 90 days by default
- Support: Up to 24 months
- Backups: Up to 90 days
Retention may extend for legal obligations, disputes, security investigations, contractual requirements, and Customer instructions where supported.
18. Return or Deletion
Upon request and where supported, Company may:
- export
- delete
- anonymize
Exceptions include:
- legal obligations
- security
- fraud
- billing
- backups
19. Confidentiality
Company maintains confidentiality obligations regarding Personal Data.
20. Liability
Liability follows governing agreements.
21. Term
This DPA remains effective while Personal Data processing occurs.
Annex I — Processing Details
- Subject Matter: Service operation
- Purpose: Provide, secure, support, and maintain Services
- Duration: Agreement term plus retention period
Annex II — Security Controls
Examples:
- Encryption
- RBAC
- MFA
- Logging
- Backups
- Monitoring
- Penetration Testing
- Incident Response
Annex III — Subprocessor Categories
- Infrastructure
- Database
- AI
- Payments
- Monitoring
- Analytics
- Storage
- Backup
Current provider details appear in the Subprocessors List.