Data Processing Agreement

Effective date: 20.07.2025

This Data Processing Agreement (“Agreement”) is part of the Terms of Service between AttributionHub.com (“Processor”, “we”, “us”, or “our”) and you (“Controller”, “Customer”, “you”).

1. Subject Matter

This Agreement governs the processing of personal data by us, solely for the purpose of providing our services to you.

2. Nature and Purpose of Processing

We process your personal data to provide access to the admin area, maintain your account, and deliver our SaaS service.

Payment data is handled by Stripe and is never stored on our servers.

Attribution script: When our script collects marketing data, this data is sent directly to your (the Customer’s) CMS/CRM. We do not store or access this marketing data.

3. Types of Personal Data and Data Subjects

Personal data stored by us:

Name (as provided by you)

Email address

Payment data: Handled only by Stripe (see Stripe’s Privacy Policy).

Attribution data: Sent directly to your systems; not stored or processed by us.

Data subjects: Customer representatives or admin users.

4. Processor’s Obligations

We agree to:

Process only the data described above and only for providing our services to you.

Keep admin user data confidential and secure.

Ensure that employees or subprocessors are under confidentiality obligations.

Notify you promptly if we become aware of a data breach affecting your data.

Assist you with reasonable requests regarding data subject rights (access, correction, deletion).

5. Subprocessors

We use trusted subprocessors (e.g., Stripe for payments, hosting providers).

We will inform you of changes to subprocessors and provide you the opportunity to object.

6. International Data Transfers

If we transfer data outside the European Economic Area (EEA), we will take appropriate legal safeguards as required by law.

7. Term and Deletion

This Agreement applies as long as you use our services.

Upon termination, we will delete admin user data unless we are required to keep it by law.

Payment and attribution data are not stored by us.

8. Audit Rights

You may request information about our data processing practices.

Audits must be reasonable and subject to confidentiality.

9. Contact

For questions about this DPA, contact us at:
Email: [email protected]