Data Processing Addendum

1. Roles of the parties

For participant, customer, or signer data that a business customer submits through WaiverChaser, the business customer is generally the controller or business, and WaiverChaser acts as the processor or service provider.

2. Subject matter and duration

WaiverChaser processes customer personal data for the purpose of hosting digital waivers, collecting signatures, generating receipts, delivering operational notifications, and supporting related account administration for the duration of the customer relationship.

3. Nature and purpose of processing

• Hosting waiver content and related business configuration.
• Collecting participant-submitted form fields, signatures, timestamps, and related records.
• Generating signed PDF receipts and other related artifacts.
• Sending signing links, confirmation emails, and operational notices.
• Securing, monitoring, troubleshooting, and improving the service.

4. Categories of data subjects and personal data

Data subjects may include the customer's staff, participants, parents or guardians, and other individuals whose data is submitted through the service. Personal data may include names, email addresses, waiver form responses, signatures, timestamps, device or browser metadata, and related records selected by the customer.

5. Customer instructions

WaiverChaser will process customer personal data only on documented instructions from the customer, as reflected in the product configuration, customer support requests, and the underlying service agreement, unless otherwise required by applicable law.

6. Confidentiality and security

WaiverChaser will use reasonable technical and organizational measures to protect customer personal data and will ensure that personnel with access to such data are bound by confidentiality obligations.

7. Subprocessors

WaiverChaser may engage subprocessors that support hosting, infrastructure, authentication, storage, email delivery, analytics, and related operational services. WaiverChaser remains responsible for managing subprocessors in a manner consistent with applicable law.

8. Assistance and data subject requests

Taking into account the nature of the processing, WaiverChaser will provide reasonable assistance to help the customer respond to applicable data subject requests and meet its privacy compliance obligations.

9. Return or deletion

Upon termination of the applicable services, WaiverChaser will delete or return customer personal data as described in the service agreement, product functionality, or applicable law, subject to legitimate retention needs for security, legal, or accounting purposes.

10. International data transfers

Where customer personal data is transferred across borders, the parties will use appropriate safeguards required under applicable data protection law.

11. Contact

For DPA-related questions, contact [email protected].