Data Processing Addendum

This addendum is part of the Terms of Service between Broadmill Software LLC (“we”) and the business that uses ConfirmCue (“you”). It covers the personal data of your customers and contacts that we handle for you (“customer data”). It applies automatically; there is nothing to sign.

For customer data, you decide why and how it is used (you are the “business” or “controller”), and we handle it on your behalf (the “service provider” or “processor”), as US state privacy laws, including the California Consumer Privacy Act and the Virginia Consumer Data Protection Act, use these words.

• Whose data: your customers, the people they ask you to contact, and your team.
• What data: names, mobile numbers, email addresses, appointment details (time, type, address, who is coming, notes), texting consent and stop requests, messages sent and received, and visits to the customer’s appointment page.
• What we do: store it, read your calendar events, plan and send confirmations and reminders, receive answers and show them to you, and support you.
• How long: while your account is open, and then as described under “When you leave”.
• Sensitive data: none is needed. Do not give us health information or other sensitive data (Acceptable Use Policy).

• We handle customer data only to provide ConfirmCue to you, as the terms, your settings and your written requests say, or when the law requires it (then we tell you first, unless the law does not allow it).
• We never sell or share customer data for advertising, never combine it with data from other businesses or sources for our own use, and never use it outside our direct business relationship with you.
• If we think an instruction breaks the law, we tell you. We will tell you if we can no longer meet our duties under privacy law.

Only people who need customer data to run or support ConfirmCue can see it, and they are bound to keep it confidential. Support views of your business are read-only, time-limited and recorded in your activity log.

We keep customer data secure with measures that fit the risk, including:

• encryption on the network and where data is stored;
• each business’s data kept apart from every other’s at every query;
• two-step sign-in for account owners and for our own admin access;
• calendar access keys and other secrets encrypted;
• no phone numbers or message words in our logs or error reports;
• an activity log of changes and of every support view;
• regular backups, and a way to pause sending at once.

You allow us to use the companies listed on our Subprocessors page. Each is bound by a written agreement that protects customer data at least as well as this addendum, and we are responsible for their work.

Before a new subprocessor starts, we update that page and email account owners at least 30 days before. If you object for a reasonable privacy reason, tell us within that time; we try to find a solution, and if we cannot, you may cancel and get back any month paid but not used.

If a person asks us to see, correct or delete their data, we send the request to you and do not answer it ourselves unless you ask us to. ConfirmCue lets you find, change, export and remove a customer’s data, and we help you when the app does not cover a request.

If we learn that customer data was lost, changed or seen by someone who should not have seen it, we tell you without undue delay, and within 72 hours of confirming it. We tell you what happened, what data was affected and what we are doing, and help you meet any duty to tell your customers or the authorities.

You can export your data at any time, including before closing your account. When your account closes, we delete customer data within 30 days, and it leaves our backups within 35 more days, unless the law requires us to keep part of it. We confirm the deletion in writing if you ask.

Once a year, or after a breach, you may ask in writing how we meet this addendum; we answer with the information you reasonably need. We may also take reasonable steps to stop unauthorized use of customer data that you report to us.

Customer data is stored and handled in the United States. ConfirmCue is offered to businesses in the United States only.

ConfirmCue is a product of Broadmill Software LLC, a Virginia limited liability company. Write to us at support@confirmcue.com.

Mailing address: 8401 Mayland Dr #11999, Richmond, VA 23294, USA