This Data Processing Addendum (“DPA”) forms part of the Modd Terms of Service when you, as a controller, instruct Modd to process personal data on your behalf.
1. Roles
You are the data controller; Modd is the data processor.
2. Scope of processing
- Subject matter: providing the Modd service.
- Duration: the term of your Modd account.
- Data subjects: end users you authorise to use the Service.
- Data categories: CV content, contact details, usage data.
3. Sub-processors
A current list of sub-processors is available on request. We will give 30 days' notice before adding new ones.
4. Security
We implement encryption in transit and at rest, least-privilege access controls, audit logging, and regular backups.
5. International transfers
Where personal data is transferred outside the EEA/UK, we rely on the EU Standard Contractual Clauses and the UK Addendum.
6. Breach notification
We will notify you without undue delay (and in any case within 72 hours) after becoming aware of a personal-data breach affecting your data.
7. Return and deletion
On termination, you may export your data for 30 days. After that we delete it from our active systems within 30 days and from backups within a further 30 days.
To execute this DPA in writing, contact legal@modd-cv.lovable.app.