Data Processing Addendum

When this applies

This addendum forms part of the Terms of Service. It applies when you use MazeRank to process personal data on behalf of someone else, in particular when an agency manages clients' websites, connects their Google Analytics or adds their staff as report recipients. For that data, you are the controller and Nuno Miguel Duarte Unip. Lda is your processor, under Article 28 of the GDPR.

What we process

• Subject matter: tracking the AI visibility of the websites you add, and sending reports.
• Personal data: names and email addresses of report recipients and team members; personal data that appears in public website content or AI answers about the tracked business; aggregated Google Analytics figures (no individual visitor data).
• Data subjects: your clients' staff and contacts, your team, and people named in tracked public content.
• Duration: for as long as you use the Service, plus the deletion period below.

Our obligations as processor

We will:

• Process the data only on your documented instructions, which are these terms and your use of the Service.
• Make sure everyone with access is bound by confidentiality.
• Keep appropriate technical and organisational security measures in place.
• Help you answer requests from data subjects and meet your obligations on security, breach notification and impact assessments.
• Notify you without undue delay after becoming aware of a personal data breach that affects your data.
• Make available the information needed to show compliance with this addendum, and allow reasonable audits on notice.

Subprocessors

You authorise us to use the subprocessors on our Subprocessors page. We announce additions or replacements by email at least 14 days in advance, and you can object. We impose data protection obligations on each subprocessor that are no less protective than these.

Transfers

Where data is transferred outside the EEA, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses.

Deletion

When you delete a website, or when the agreement ends and you close your account, we delete the related personal data, unless the law requires us to keep it. Copies in backups are overwritten on their normal cycle.

Contact

For questions about this addendum, or to request a signed copy, write to privacy@mazerank.com.