top of page

Data Processing Policy

Data Processing Agreement (DPA) for ReviveYourBusiness.com
Last updated: June 11, 2025

This Data Processing Agreement ("DPA") is part of the Terms of Service ("Agreement") between [Customer Name]("Customer," "you," "your") and ReviveYourBusiness.com ("the Software," "Processor," "we," "our," "us"). This DPA governs the processing of personal data that we perform on behalf of the Customer in connection with the provision of the Software, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Definitions

Data Controller: The entity that determines the purposes and means of the processing of personal data.
Data Processor: The entity that processes personal data on behalf of the Data Controller.
Data Subject: Any identified or identifiable individual whose personal data is processed.
Personal Data: Any information relating to an identified or identifiable individual.
Processing: Any operation or set of operations performed on personal data, such as collection, storage, use, disclosure, or erasure.
Sub-Processor: Any third party appointed by the Processor to process personal data on behalf of the Customer.

2. Roles and Responsibilities

Customer as Data Controller: The Customer acts as the Data Controller for all personal data processed through the Software. As Data Controller, the Customer is responsible for determining the legal basis for processing and ensuring compliance with applicable data protection laws.
ReviveYourBusiness.com as Data Processor: ReviveYourBusiness.com acts as the Data Processor and processes personal data on behalf of the Customer in accordance with this DPA and the Customer's instructions.

3. Types of Personal Data Processed

ReviveYourBusiness.com processes the following types of personal data on behalf of the Customer:

  • End-user data: Names, email addresses, reviews, feedback, video testimonials, and other information submitted through review requests or landing pages.

  • Customer data: Names, email addresses, contact information, login credentials, and other business-related data.

  • Usage data: IP addresses, device information, and data related to the usage of the Software.

The scope of the data processed may change based on the services provided by ReviveYourBusiness.com, and the Customer will be informed accordingly.

4. Purpose of Processing

ReviveYourBusiness.com processes personal data for the following purposes:

  • Aggregating reviews from third-party platforms (e.g., Google, Facebook)

  • Responding to reviews via artificial intelligence on behalf of the Customer

  • Sending review request campaigns and processing feedback

  • Sharing reviews through widgets and social media platforms

  • Performing analytics to track and enhance reputation management

  • Automating processes such as the sending of review requests

5. Duration of Processing

The processing of personal data will continue for the duration of the Agreement, unless otherwise required by law or requested by the Customer for data deletion.

6. Processor Obligations

ReviveYourBusiness.com agrees to:

  • Process data only under instructions from the Customer

  • Ensure confidentiality of employees and contractors handling data

  • Implement security measures to protect personal data

  • Assist the Customer with data subject requests and compliance

  • Notify the Customer without undue delay in the event of a data breach

7. Customer Obligations

As Data Controller, the Customer agrees to:

  • Provide lawful instructions to ReviveYourBusiness.com

  • Inform data subjects and obtain consents where required

  • Ensure there is a valid legal basis for data processing

  • Handle data subject requests directly, with assistance from us if needed

8. Sub-Processors

ReviveYourBusiness.com may engage Sub-Processors and will:

  • Ensure they meet the same data protection obligations

  • Notify the Customer of changes to Sub-Processors with an opportunity to object

  • Remain liable for all Sub-Processor activities

A list of current Sub-Processors can be provided upon request.

9. International Data Transfers

ReviveYourBusiness.com may transfer personal data outside the EEA or other jurisdictions. When doing so, we ensure appropriate safeguards, including Standard Contractual Clauses or other lawful mechanisms, are in place.

10. Security Measures

We implement appropriate technical and organizational measures including:

  • Encryption of data during transmission

  • Role-based access controls

  • Security audits and risk assessments

  • Data breach response procedures

11. Data Subject Rights

We assist the Customer in supporting data subjects’ rights, such as:

  • Access, correction, and deletion of personal data

  • Objection to processing or request for data portability

Requests will be referred to the Customer unless otherwise directed.

12. Data Retention and Deletion

Upon termination or expiration of the Agreement, we will, at the Customer’s request:

  • Return or delete all personal data, unless retention is required by law

13. Audit Rights

The Customer may request audits, at their own cost, with reasonable notice and minimal disruption to ReviveYourBusiness.com's operations.

14. Liability

Liability under this DPA is governed by the limitations in the main Agreement, unless prohibited by applicable law.

15. Governing Law

This DPA is governed by the laws of the State of [Your State, e.g., Texas or California], without regard to conflict of law principles.

16. Termination

This DPA remains in effect while ReviveYourBusiness.com processes data on behalf of the Customer. Provisions survive termination as long as data is retained.

17. Contact Information

If you have questions about this DPA or your data rights, please contact us at:
📧 support@reviveyourbusiness.com
🌐 https://reviveyourbusiness.com

bottom of page