Data processing agreement

Parties and scope

This agreement is between Conversint Consulting LLC, a Texas limited liability company (“we”, the processor) and the organization that accepted our terms (“you”, the controller). It applies to personal data we process for you to provide Unblockd, wherever data protection law requires such an agreement, including the EU and UK GDPR. It takes effect when you accept the terms. A countersigned copy is available on request from hello@unblockd.ai.

The processing

• Subject matter and purpose: providing Unblockd as described in the terms and the documentation: project tracking, reporting, asks to sponsors, and the features you turn on.
• Duration: while your workspace exists, then deletion as set out below.
• Data subjects: your team members, and the sponsors, stakeholders, and other people you add to projects.
• Personal data: names, work email addresses, roles, what people write and do in projects, and items brought in from tools you connect. No special categories are needed and you shouldn’t add them.

Our commitments

• We process personal data only on your documented instructions, which are these terms, your settings, and what your team does in Unblockd, unless the law requires otherwise, in which case we tell you first where the law allows.
• Everyone who can access it is bound to confidentiality.
• We keep appropriate technical and organizational security measures, as described in our security page and privacy policy, including encryption in transit, encrypted tokens at rest, workspace isolation, and an audit trail of every change.
• We help you answer data subject requests, and with security, breach notification, impact assessments, and consultations, as far as our role allows.
• We tell you without undue delay, and within 72 hours of confirming it, if a personal data breach affects your workspace, with what we know and what we’re doing.
• When your workspace is deleted, its data is deleted at once and leaves our backups within 30 days; operational records our subprocessors keep, such as email delivery logs and error reports, expire under their own retention. Before deletion, a workspace admin can export the data from Settings.
• We make available the information needed to show we meet this agreement, and allow audits by you or an auditor you choose, on reasonable notice and at most once a year unless a breach or a regulator requires more.

Subprocessors

You authorize us to use subprocessors for hosting, the database, sign-in, email, payments, error tracking, and the built-in AI you choose to use. Each is bound by terms that protect your data at least as well as this agreement, and we remain responsible for them. The current list, with what each processes and where, is available on request from hello@unblockd.ai. We give at least 30 days’ notice by email before adding or replacing one; if you object on reasonable data protection grounds and we can’t address it, you may end the affected service and receive a refund of prepaid fees for it.

International transfers

Unblockd stores and processes data in the United States. For personal data transferred from the European Economic Area, Switzerland, or the United Kingdom, the European Commission’s standard contractual clauses (Decision 2021/914, Module Two controller to processor, and Module Three where you are yourself a processor) are incorporated by reference, with the UK International Data Transfer Addendum for UK data and the Swiss adaptations for Swiss data. For those clauses: the option in clause 7 does not apply, clause 9 option 2 (general authorization) applies with the notice period above, the optional language in clause 11 does not apply, and clauses 17 and 18 choose Ireland’s law and courts. This page’s processing details serve as Annex I, our security measures as Annex II, and the subprocessor list as Annex III. Where a subprocessor is certified under the EU-US Data Privacy Framework, that also covers its transfers.

Order of precedence

If this agreement conflicts with the terms on personal data, this agreement wins; if it conflicts with the standard contractual clauses, the clauses win. Questions go to hello@unblockd.ai.