Regpack Service Agreement and Data Processing Agreement

regpack service agreement this service agreement is a legal agreement between regpack inc (hereafter referred to as the or "regpack" or "we" or "our" or "us") will enter into this agreement with you (hereafter as the “client” or "you" or "your" or "licensee") to provide services outlined below (hereafter the “product” or "platform" or "project") the effective date of this agreement is the date the setup fee is paid both regpack and “client” hereto agree as follows billing terms terms are based on the amount of admin licenses and cost per license as outlined in the cart client can login to the regpack administrative portal and navigate to “billing” to review their current billing and cart general billing terms package(s) a package of licenses refers to a bundled offering of multiple individual licenses provided by regpack to the client under a single agreement each license within the package grants designated users specific rights to access and utilize the features, tools, and functionalities of the service, as outlined in the applicable subscription or service plan the package of licenses may include, but is not limited to admin license(s) specialized license(s) premium features and/or functions advanced reports and/or analytics the total number and type of licenses included in the package are defined in the order form, pricing schedule, or attached exhibits, and are subject to the following conditions allocation and assignment licenses may only be assigned to specific users authorized by the subscriber reassignment or reallocation of licenses must comply with the terms outlined herein non transferability licenses within the package are non transferable and may not be shared among multiple users unless explicitly permitted in writing by the regpack term and renewal the package of licenses is subject to the same term and renewal provisions as the overarching agreement additional licenses additional licenses beyond those included in the package may be purchased by upgrading packages the client is responsible for ensuring that all users assigned licenses comply with the terms of this agreement misuse or unauthorized sharing of licenses may result in suspension or termination of access to the service admin license(s) admin license(s) are granted access to the client's administrative portal where their access includes, but not limited to, managing user accounts, assigning license roles and permissions; configuring platform settings and integrations; facilitating billing and payment processing; accessing user payment data, financial analytics, and reports the admin license is issued solely to the client or an authorized representative of the client the client is responsible for ensuring that admin users act in accordance with the terms of this agreement misuse of the admin license, including unauthorized access or use beyond its intended administrative scope, may result in suspension or termination of the license and associated services admin license levels owner – includes access to all elements of the product and full permission to speak with regpack representatives about all elements of the account all owners must be super admins super admin – includes read and write access to all building, payment, and reporting elements of the product including permission to speak with regpack representatives about all elements of building, payment, and reporting elements financial admin includes read and write access to all payment elements of the product including permission to speak with regpack representatives about all elements regarding payments api admin strictly for accessing our open api and webhook tools it can’t be accessed by any individual(s) outside of the api connection api admin licenses are not eligible for discounts, special promotions, or group pricing collaborator – includes only read and write access to user information guest – includes only read only access to user information only super admin, financial admin, and collaborator(s) are able to communicate with the regpack support team via email only super admin(s) are eligible for training session(s) and scheduled phone calls licensing packages overview the client has the option to select one of the following licensing packages, each providing different levels of features, services, and support all included features, functions, and services listed below are not exhaustive and can be adjusted with 30 days’ written notice from service provider small to medium business (smb) package scope designed for smaller organizations with standard resource requirements included features package of administrator licenses to be distributed as needed access to advanced module features eligible for api integrations with an additional cost standard api license 10,000 daily calls advanced api license 25,000 daily calls mid market api license 50,000 daily calls payment terms package will be billed every 365 days, with setup fee included in cost, and is eligible to be paid in installments mid market package scope designed for established organizations requiring more advanced features and reporting included features all smb features, plus standard api license access to api module and 3rd party integrations included in cost 10,000 daily calls eligible for advanced reporting and analytics with an additional cost payment terms package will be billed every 365 days, with setup fee included in cost, and is eligible to be paid in installments enterprise package scope tailored for large organizations with complex needs, requiring full customization and unlimited scalability included features all mid market features, plus (12) complimentary project consultation within initial (12) months of subscription advanced api license access to api module and 3rd party integrations included in cost 25,000 daily calls organization level reporting and analytics including in cost (1) api consultation meeting limit 60 minutes access to premium support all support messages are handled with highest priority payment terms package will be billed every 365 days, with setup fee included in cost, and is eligible to be paid in installments à la carte packages clients may also select à la carte licenses, which allow for access to core features while excluding certain advanced functions available in higher tier packages (such as advanced module functions, advanced reporting, or api integrations, etc) scope of à la carte licenses core access clients purchasing à la carte licenses will have access to essential registration and payment processing tools, which include basic registration forms and workflows standard payment collection and processing basic reporting tools limited collaborator and guest license(s) additional license(s) can be purchased by upgrading to package excluded features clients opting for à la carte licenses will not have access to the following higher level functions advanced module functions api access for external integrations custom reporting and analytics beyond standard templates features requiring custom onboarding or dedicated account management pricing & terms pricing à la carte licenses are eligible for either 365 days or 730 day terms, not including additional nonrefundable setup fee for onboarding clients, and are not eligible to be paid in installments limitations features not included in the à la carte package may be unlocked by upgrading to a smb, mid market, or enterprise package, with written notice and an associated fee adjustment upgrade and downgrade terms upgrade the client may upgrade to a higher licensing package at any time by providing written notice to the service provider upgrades can only be requested by a designated account owner and/or verified executive adjustments to the pricing will be prorated for the remainder of the billing cycle downgrade the client may request to downgrade the package upon contract renewal or by providing 60 days’ notice before the next billing cycle the downgrade will take effect at the start of the following billing cycle term and renewal the terms of each package shall remain in effect as long as the client maintains an active subscription all packages shall renew automatically every 365 days renewals will be handled automatically at the end of each billing cycle unless terminated by either party, with 30 days’ written notice provided as per this agreement legacy pricing clause clients who have entered into a service agreement with the service provider prior to will retain their current pricing structure for as long as they remain on their existing package, subject to the conditions outlined below conditions for maintaining legacy pricing existing license holders the client may continue using their current package and maintain their existing pricing without any increase for as long as they do not add additional licenses beyond the current number upgrade to a higher licensing package (e g , smb to mid market or mid market to enterprise) annual pricing adjustments excluded clients with legacy pricing will not be subject to annual rate increases for the duration of their current agreement, unless the agreement is modified as described in section 5 2 termination of legacy pricing the client acknowledges that legacy pricing will terminate, and standard pricing will apply if any of the following occurs license expansion if the client adds new admin licenses beyond the current number as of the effective date, the pricing will adjust to the then current rate for the entire account upgrade to a higher package if the client chooses to upgrade their licensing package (e g , from smb to mid market or enterprise), the pricing will adjust to the then current rate for the selected package additional features if the client elects to add new features or services that are not included in their current package, these will be subject to the current pricing for those features at the time of the request payment method clients must maintain a valid credit or debit card or bank account on file, saved electronically by agreeing to these terms, you authorize regpack to charge the saved payment method for all fees due under this agreement, including applicable taxes, late fees, and interest (as detailed below) payments made through alternative methods are subject to a prepayment requirement, and all upcoming balances must be paid within twenty eight (28) days of the due date if payment is not received within this period, regpack reserves the right to charge the saved electronic payment method for the outstanding balance you represent and warrant that you are legally authorized to use the provided payment method and agree to be solely responsible for any fraud, abuse, or unauthorized use associated with the payment method by yourself or others refund policy all payments, including packages or legacy annual license fees, initial setup fees, project consultation fees, and any other incurred fees, are non refundable once paid for cancellation of a monthly or annual plan, refer to the cancellation policy section outlined below account suspension clients may suspend their account once per 12 month period for up to 60 days during suspension, billing will pause, and account access will be restricted requests for access to information during the suspension period will automatically reactivate the account, and billing will resume immediately to suspend your account, you must submit a written request by emailing mailto\ payments\@regpacks com the suspension will take effect once the request has been received and processed unless otherwise specified, the account will automatically reactivate after 60 days, and billing will resume as normal cancellation policy to cancel your account, at least 90 days’ notice is required cancellation requests must be submitted by account owners through the administrative portal by navigating to settings → billing → cancellation request if you wish to cancel within 90 days of your preferred cancellation date, regpack offers the following options for immediate cancellation one time fee payment of 50% of all super admin licenses under your organization or a minimum of $2,000 usd to cancel all super admin licenses that are 12 months or longer upon receipt of payment, regpack will close the account immediately upfront payment payment of the license fees for all monthly super admin licenses listed in your account for the subsequent 90 days upon receipt of payment, regpack will close the account immediately reactivating or re opening an account resets the cancellation notice requirement enforcement of licensee access clients are responsible for managing user access to regpack’s administrative portal, including inviting, removing, and adjusting permissions for individual users regpack and its representatives will not make changes to user access, except for inviting the initial account owner licensees will have access to the portal features and permissions assigned by the client clients are fully responsible for any actions taken by their authorized users regpack is not liable for malicious actions, data loss, or damages caused by authorized users, including but not limited to password sharing or loss of access due to negligence licenses cannot be used simultaneously on multiple devices or by multiple individuals attempts to access the portal simultaneously will result in immediate expulsion multiple expulsions may lead to permanent license termination all licenses require multi factor authentication (mfa) , which cannot be disabled or circumvented mfa codes will be sent to the documented email address associated with the license email addresses must be unique to each licensee and cannot be shared inboxes regpack reserves the right to reject email addresses that may be accessed by multiple individuals admin license transfer policy regpack allows license transfers at no additional cost as long as the account has available seats within its package license allocation if a transfer exceeds the allotted seats, the following conditions apply exceeding seat allotment transfers that breach the seat allotment will incur additional costs these costs may include the full cost of an additional single license , or an upgrade to a higher package that accommodates the required seats eligibility for license transfers transfers are available only for accounts subscribed to package plans accounts on legacy pricing plans are not eligible for license transfers under any circumstances transfer limits a maximum of one (1) transfer is allowed per calendar year at no cost, provided it does not exceed seat allotment for transfers exceeding this limit or requiring additional seats, fees or package upgrades will apply as outlined above case by case review requests for additional transfers beyond the third in a calendar year or special cases will be reviewed and considered at regpack’s sole discretion regpack reserves the right to amend this license transfer policy, including pricing and eligibility requirements, at any time without prior notice project consultation as part of your onboarding process, your first project build includes project consultation services for a duration of 2 months from the date of your first payment if your project build is not completed within this timeframe and you wish to continue working with your assigned project manager, an additional fee will apply following the initial project build, project manager assistance for additional projects will also be available for an additional fee scope of project consultation the project manager is responsible for assisting the client with the foundational structure of their project, including initial form structure setting up and configuring up to 15 initial forms product and discount setup establishing the initial structure for products and discounts, as necessary training and scheduling providing guidance and scheduling training sessions for the client email trigger review reviewing and ensuring email communication mechanisms function as expected once the project manager determines that the project is ready to go live, the client will transition to the support team the typical timeline for project readiness, including live registration, is 10 business days following the submission and approval of all required client documentation by the project manager all pricing and related documentation must be submitted in full and approved before the build process begins the projected timeline is contingent upon the client meeting all tasks and deadlines as specified by the project manager regpack reserves the right to reassign the project consultant or discontinue project consultation services without cause or prior notice exclusions from project consultation project consultation does not include text adjustments or modifications to elements after insertion into the project super admins will have the ability to make these adjustments after the structural build is complete support or maintenance after the project is ready to go live creation or setup of user reports drafting or implementation of email messages for user communication manual entry or typing of legal documents or agreements design services, image implementation, or html coding support inclusions in project consultation project consultation does include creation and setup of the initial forms (up to 15 forms) setup of initial products or services, if applicable confirmation and review of email trigger mechanisms to ensure proper functionality initial instructions on how to access and edit elements that are not included in the scope of project manager support integrated payments regpack facilitates online payments via credit cards and ach transfers for u s bank accounts only all payment processing is handled through third party partners , including but not limited to bluesnap and stripe these partners are solely responsible for all aspects of payment processing, including but not limited to money transfer and fund arrival, payment authentication, fraud detection, and chargeback arbitration risk assessments and processing rates our payment partners conduct independent risk assessments, which may impact the processing rates applied to transactions regpack acts only as the technological intermediary for payment processing and assumes no responsibility for fund transfers or associated activities clients enter into a standard processing agreement directly with the payment processing partner assigned to their project or organization the integration of additional processing partners is solely at regpack’s discretion merchant account requirements to enable payment services, clients must apply as a merchant through regpack as part of this process, all merchant accounts are subject to know your customer (kyc) verification, requiring individual identity verification for further details, please refer to the terms of service of our integrated payment partners stripe terms of service bluesnap terms and conditions bluesnap merchant agreement by entering into this agreement with regpack, you confirm that you have reviewed and agree to the terms of service and privacy policies of our payment processing partners applicable to your country of operation prohibited transactions illegal products and services the processing of payments for illegal products or services is strictly prohibited by regpack and its integrated payment partners sanctioned countries and currencies transactions are restricted to countries and currencies not listed on the u s state department's blocked or sanctioned list for inquiries regarding payment eligibility for specific countries or transactions, please contact the regpack payments team at mailto\ payments\@regpacks com prohibited data collection the client, its representatives, and contractors are strictly prohibited from collecting sensitive financial data through unauthorized methods or fields within regpack sensitive financial data includes, but is not limited to full credit card numbers, images of credit cards, and any associated identifying information all interactions with sensitive financial data within regpack must occur exclusively through authorized widgets , which are encrypted in compliance with pci regulations any violation of this policy may result in the suspension or termination of the client’s access to regpack services integrated payment reports regpack provides clients with the ability to generate and export transaction reports in csv format using tokens provided within the platform clients also have the option to create and export payout reports directly through regpack based on their license role and/or permissions transaction reports include, but are not limited to, the following details sales, refunds, and chargebacks, transaction details such as name, amount, date, and last four digits of the credit card number, a breakdown of commissions deducted from payments, and processing rates for each payment method processing fees determination of fees \ credit card processing fees are determined by the credit card issuer specific rates for processing can be obtained from the regpack payments team upon request american express, discover, and diners club cards will incur an additional surcharge of 1 6% plus $0 50 on top of standard visa/mastercard rates payment method limitation \ clients can independently control the payment methods available within their projects, including limiting payments to credit cards only, restricting specific types of credit cards, or offering ach payment options exclusively fee adjustments \ processing fees are subject to change due to risk re evaluation by processing partners, changes in applicable laws or regulations, adjustments by credit card companies, or pricing changes by third party processors initial and quarterly fee evaluations processing fees are determined during the onboarding process, based on estimated transaction volumes and payment method ratios provided to the regpack sales representative documentation may be required to secure initially quoted rates processing fees will be re evaluated quarterly based on actual transaction performance fee deductions and deposits processing fees are automatically deducted from transactions before funds are deposited into the client’s bank account clients can access a dashboard maintained by processing partners to review and reconcile transaction details funds can be deposited via ach transfer or wire transfer , with additional fees applicable for wire transfers deposit schedules can be selected by the client, with options for daily, weekly, or monthly deposits risk holds processing partners may place a hold on client funds based on their independent risk evaluations payment risk compliance to mitigate the risk of chargebacks and mass refunds, the client acknowledges that regpack may, at any time, require the addition of specific information to the client’s offerings across all projects these requirements are necessary to maintain compliance with the following risk protocols and guidelines from government entities, card issuer policies, regpack’s payment gateway agreements, and regpack’s internal risk standards failure to comply with these requirements may result in increased processing rates to offset heightened risk levels data requirements to ensure compliance, the client must provide the following information for all offerings, including but not limited to the date or date range of all in person and virtual offerings, and a detailed description of each offering, including its price updates to compliance conditions regpack reserves the right to update these compliance requirements at any time to align with changes in risk guidelines from processing partners or adjustments to government or industry standards refunds clients can issue refunds directly through the embedded refund function in regpack’s administrative portal refunds beyond 60 days or pending ach payments for refunds requested more than 60 days after the transaction date or for pending ach payments , the following process applies the client must send an email from an authorized licensee to mailto\ payments\@regpacks com the email must include the full name of the payee, the email address of the payee, and the refund amount refunds for these cases will be processed within 48 72 business hours once processed the user’s balance will be updated accordingly refunds will appear as negative amounts on the payment page, accessible to the client at any time chargebacks and ecp reversals chargebacks the client will incur a $15 fee for each chargeback a chargeback occurs when a consumer's issuing bank initiates the return of funds previously transferred to the client chargebacks typically arise from disputes or claims initiated by the consumer and result in the reversal of the original transaction if the client chooses to dispute a chargeback, the review process and final determination are managed solely by the processing partner regpack does not participate in or influence the outcome of chargeback reviews ecp (electronic check processing) reversals the client will incur a $4 fee for each ecp reversal caused by a declined ach payment common reasons for ach payment reversals include insufficient funds, incorrect account information, inability to locate the account, or other factors related to payment processing purchase protection purchase protection is a third party service available for organizations to integrate into their projects at no additional cost this service provides reimbursement for eligible products under specific criteria, such as illness, ensuring users are protected for qualifying scenarios key features coverage purchase protection covers some or all of the user’s payment for eligible products if the established eligibility criteria are met opt in/opt out flexibility the software allows both the client and their users to opt in or opt out of the service on a per project basis, providing flexibility for individual needs for further details on eligibility requirements and conditions, refer to the full purchase protection terms of service https //help regpack com/purchase protection terms and conditions account/admin support regpack provides support primarily via email during business hours, which are monday through friday, 9 00 am 5 00 pm pst regpack reserves the right to amend or adjust these support hours at any time without prior notice all inquiries, concerns, requests, and issues must be submitted directly by a licensed user to mailto\ support\@regpacks com project updates/maintenance regpack is not responsible for the day to day maintenance of the client’s project this includes, but is not limited to updating text, fields, products, emails, or triggers, modifying any function or feature the client has access to within the platform the client is solely responsible for making updates and maintaining their project using the tools and functionality provided by regpack development requests regpack provides its product on an “as is” basis and retains sole discretion over the features and functions available within the platform, as well as future development priorities while clients are welcome to submit feature requests, regpack does not guarantee development timelines or implementation of such requests for custom development requests specific to a client’s project these requests require additional fees and are subject to approval by regpack’s head of development custom development will be priced according to the scope of work provided by the client end user contact regpack does not provide direct support to a client’s end users if an issue requires regpack to interact with an end user for troubleshooting purposes, the following conditions apply the client must act as an intermediary and facilitate communication between regpack and the end user except in cases involving purchase protection any direct contact with an end user by regpack requires written consent from the client regpack will not sell any end user information to third parties without prior authorization from the client account/admin support eligibility regpack verifies support eligibility based on an individual’s admin level and/or permissions within the project support is provided exclusively to individuals with an active admin license , and regpack staff will only engage with individuals regarding projects to which they have access for security purposes, any individual without an admin license is considered unauthorized and will not be eligible for support security regpack is designed with robust security measures to protect client and user data data encryption all operations are conducted on encrypted servers with ssl 256 bit encryption data transfer is secured using the ssl protocol to ensure it cannot be viewed by unauthorized third parties payment security payment information is processed using a split database mechanism , where user information and payment data are stored separately payment data is stored on a pci 1 compliant server with the following safeguards encrypted api access, ip address whitelisting, rotating passwords and usernames, and on the fly protection algorithms to establish secure handshakes payment data can only be accessed within the regpack network or by regpack’s processing partners pci compliance regpack is pci level 2 compliant and undergoes daily scans to verify system integrity, daily backups to secure client data, and regular independent audits to confirm compliance violations of pci compliance any client action that breaches pci compliance regulations will result in the immediate suspension of the client’s account and permanent purging of all account information violations include but are not limited to collecting credit card or bank information outside of regpack’s checkout widget, capturing payment data from end users via unauthorized forms, sharing login credentials or admin licenses with multiple individuals, and any other action that violates pci compliance regulations any client who’s willful negligence is found to be the cause of any disaster or major outage will be held liable for any cost incurred by regpack or affected parties any third party partner company found in violation may have their access terminated application updates and releases regpack will release updates to the platform at its sole discretion these updates, including their frequency and content, are determined internally by regpack’s development team issue reporting and fixes all client reported issues will be reviewed by regpack fixes for confirmed issues will follow regpack’s internal release timelines, which are non binding and communicated at regpack’s discretion release dates release dates for updates or fixes are generally kept internal if shared, these dates are non binding and subject to change development timeline for custom feature requests a timeline will be provided and agreed upon by the project stakeholders prior to payment the timeline will only become binding if payment is received by the date outlined in the quote for project related tasks, such as admin email/name adjustments or vendor account implementation , completion time may take up to 14 business days for issues escalated to regpack’s development team investigation may take up to 14 business days if the issue is confirmed as legitimate, it will follow regpack’s standard release guidelines as outlined above all applications, modules, systems, functions, abilities, and structures built by regpack are our sole property any fees paid are for active accounts only and not for ownership the client cannot claim rights to this property due to usage, payment, improvement, or participation in the development process additional disclaimers except as expressly provided in this agreement, all services are provided on an “as is,” “as available,” and “with all faults” basis to the fullest extent permitted by law, regpack disclaims all implied conditions, representations, and warranties, including but not limited to any implied warranties or conditions of merchantability, fitness for a particular purpose, title, or non infringement regpack makes no guarantees, representations, or warranties regarding the usefulness, quality, or suitability of the services, the completeness or accuracy of the services, or that the services will be error free, uninterrupted, or free from defects modification of terms regpack reserves the right to update or amend this agreement at any time without cause or prior notice by agreeing to these terms, you acknowledge and accept that the terms may be changed or updated without prior notice arbitration this agreement includes an arbitration provision that governs any disputes between regpack and the client by agreeing to these terms, you acknowledge that arbitration eliminates the right to a trial by jury and significantly affects your rights, including prohibiting participation in class or consolidated proceedings arbitration process any controversy or claim arising out of or relating to this agreement, or the breach thereof, shall be settled by arbitration in accordance with the commercial arbitration rules of the american arbitration association (aaa) the judgment rendered by the arbitrator(s) may be entered in any court with appropriate jurisdiction the location of arbitration proceedings may be amended or adjusted to comply with local laws and statutes data storage upon suspension or cancellation regpack complies with gdpr and other applicable data protection regulations by limiting data retention based on account status suspended accounts user data for suspended accounts will be stored for a maximum of 6 months accounts suspended for this period will automatically be reactivated upon reaching the term limit, and billing will resume per the terms outlined in this agreement canceled accounts canceling an account will result in the immediate and permanent purging of all user data once data has been purged, it cannot be recovered request process all suspension or cancellation requests must be submitted and confirmed in writing important notice by canceling or suspending your account, you acknowledge that data retention policies apply as outlined above, and purged data cannot be recovered limitation of liability aggregate liability in no event shall either party’s total aggregate liability arising out of or related to this agreement, whether in contract, tort, or under any other theory of liability, exceed the total fees actually paid to regpack by the client under this agreement in the twelve (12) months preceding the incident(s) giving rise to such liability client responsibility regpack assumes no liability for the client’s failure to perform in accordance with this agreement or for any outcomes resulting from the client’s acts, omissions, negligence, or the actions of the client’s subcontractors, agents, or employees regpack shall not be liable for third party claims arising from or in connection with the client’s products, messages, or programs, the client’s caller contracts, promotions, or advertising, allegations of libel, slander, or violation of intellectual property rights (e g , copyright or trademark infringement) in relation to the client’s products or services exclusion of damages no liability for indirect damages in no event shall regpack or the client be liable to each other, or to any other party, for any lost profits, loss of business, goodwill, or revenue, indirect, special, incidental, punitive, or consequential damages, damages caused by or arising under any theory of liability, including contract or tort, even if advised of the possibility of such damages client responsibility for products and payments the client assumes full responsibility and liability for payments processed (automated or manual), delivery of purchased goods or services, use, production, and/or commercialization of the licensed technology, including its safety, effectiveness, and reliability regpack shall not, under any circumstances, be held liable for any indirect, special, consequential, or punitive damages related to the client’s practice of the rights granted herein remarks taxes and vat prices listed do not include vat or any other applicable taxes the client is responsible for calculating and applying these taxes in their system as required by law use of client information regpack reserves the right to use the client’s logo and company name in marketing materials and promotions, identifying the client as a regpack account processing fee validity the processing fees and any custom pricing outlined in this agreement are valid for 30 days from the signing of this agreement and will automatically renew monthly terms of service access the client may request the most up to date version of regpack’s terms of service at any time by contacting mailto\ support\@regpacks com assignment regpack will process personal data solely in accordance with your written instructions, unless required to do so by law by signing this agreement, you authorize regpack to process personal data collected on your behalf regpack employs appropriate technical and organizational measures to ensure the secure processing of personal data while regpack takes every reasonable step to maintain the security of personal data, you agree to uphold your own technical and organizational responsibilities to ensure data security these responsibilities include, but are not limited to protecting admin credentials do not share your admin credentials with any unauthorized individuals account access limit account access to authorized personnel only third party compliance ensure that any third parties you engage with are compliant with gdpr and other applicable data protection laws when handling personal data client responsibilities as part of your responsibilities under this agreement, you are required to maintain data security take all necessary steps to secure personal data, including adhering to the responsibilities outlined above report data breaches notify regpack immediately of any personal data breaches that occur handle data deletion requests fulfill user requests for data deletion within one (1) month of the request being received, owner admin have access to purge any user information with no additional costs or charges regpack data processing agreement (dpa) this data processing agreement (“dpa”) is entered into by and between regpack, inc (“regpack”) and the party signing this agreement (the “customer,” also referred to as the “data controller”) and governs the processing and security of personal data under the agreement this dpa is effective as of the last signature date (“effective date”) and is incorporated into the regpack terms and conditions, including the privacy policy (collectively, the “agreement”) this dpa reflects the parties’ agreement regarding the processing of personal data under applicable data protection laws, including the general data protection regulation (eu) 2016/679 ("gdpr") 1\ purpose and scope each party agrees to process personal data only for the purposes set forth in the agreement and in accordance with applicable data protection laws 2\ definitions applicable data protection laws all laws and regulations applicable to the processing of personal data under the agreement, including the gdpr controller the entity determining the purposes and means of processing personal data processor the entity processing personal data on behalf of the controller sub processor any third party engaged by the processor to process personal data personal data information relating to an identified or identifiable individual processing any operation performed on personal data, such as collection, storage, and use user the individual to whom the personal data relates 3\ roles and responsibilities customer is the controller; regpack is the processor regpack shall only process personal data per the customer’s documented instructions, unless required otherwise by law 4\ customer obligations customer must ensure it has the necessary rights to provide personal data to regpack and that such data was collected in accordance with applicable data protection laws customer shall handle user data subject rights requests 5\ regpack obligations regpack shall implement appropriate technical and organizational measures only process personal data to provide and improve the services not use personal data for any unauthorized purpose 6\ sub processors customer provides general authorization for regpack to use sub processors each sub processor is bound by data protection terms no less protective than this dpa a list of sub processors is available upon request 7\ data subject rights regpack will assist customer with responding to user rights requests by implementing appropriate technical and organizational measures 8\ international transfers transfers of personal data outside the eea will comply with chapter v of the gdpr and be made under valid legal mechanisms, such as standard contractual clauses 9\ security regpack maintains security standards outlined at https //www regpacks com/regpack security/ regpack will not reduce these standards during the term of the agreement 11\ limitation of liability each party's liability under this dpa is governed by the "limitation of liability" section in the regpack service agreement 12\ order of precedence in case of conflict the regpack service agreement prevails over this dpa the standard contractual clauses prevail over both 13\ u s and canadian privacy law compliance regpack agrees to comply with applicable u s state privacy laws, including california consumer privacy act (ccpa) and california privacy rights act (cpra) virginia consumer data protection act (vcdpa) colorado privacy act (cpa) connecticut data privacy act (ctdpa) utah consumer privacy act (ucpa) texas data privacy and security act (tdpsa) regpack shall not sell or share personal data use personal data only as needed to perform services maintain appropriate safeguards and contractual compliance canadian law regpack will comply with pipeda and applicable provincial privacy laws, including quebec’s law 25 cross border transfers will ensure adequate protection under canadian law standard contractual clauses (sccs) – module 2 controller to processor section i clause 1 sets safeguards for data transfers under article 46(2)(c) of gdpr clause 2 clauses are binding and may not be modified except to add non conflicting terms clause 3 data subjects may enforce these clauses as third party beneficiaries section ii – obligations of the parties clause 4 data importer processes data per instructions and ensures security clause 5 data importer informs data exporter of any subject requests clause 6 data importer provides a contact for complaints and cooperates in resolution clause 7 cooperation with supervisory authorities is required section iii – local laws and obligations clause 8 data importer must confirm local laws don’t conflict with scc obligations clause 9 data importer must notify exporter and subject of legally binding access requests section iv – use of sub processors clause 10 data exporter gives general authorization for sub processors; importer must inform of changes section v – final provisions clause 11 upon termination, data must be returned or deleted unless legally required to retain it clause 12 governing law is that of the exporter’s country clause 13 disputes shall be resolved in the exporter’s jurisdiction clause 14 both parties affirm agreement to the sccs for more information or support, please contact mailto\ support\@regpacks com