Data Processing Addendum
Short-form processor terms for the buyer data breakers run through BreakCast OS™. Incorporated into the Terms of Service for every customer.
This Data Processing Addendum ("DPA") is between the customer accepting the Terms of Service (the "Customer", the breaker) and LogiRoot AI Inc. d/b/a LiveCast Systems ("LiveCast"). It governs LiveCast's processing of the personal information of the Customer's buyers ("Buyer Data") and applies automatically to every Customer.
1. Roles and instructions
- The Customer is the controller (or "business") for Buyer Data. LiveCast is the Customer's processor and service provider.
- LiveCast processes Buyer Data only on the Customer's documented instructions. The functions of the product as the Customer configures and uses them (recording sales, rendering the board, VIP consent and email tooling, exports, deletion and anonymization tooling) constitute those documented instructions.
- Buyer Data is processed only within the Customer's own organization in the Service, never across organizations.
2. Confidentiality
LiveCast keeps Buyer Data confidential. Personnel access is limited to those who need it to provide or support the Service, and those personnel are bound by confidentiality obligations. Administrative access is logged.
3. Security measures
LiveCast protects Buyer Data with measures appropriate to its nature, including: encryption in transit and at rest, organization-scoped access controls so no customer can reach another customer's data, audit logging of access, data minimization (the Service stores buyer handles and transaction facts; buyer emails only via the consent flow), and tested backups that age out on schedule.
4. Sub-processors
- The Customer authorizes the sub-processors on the published list in Section 5 of the Privacy Policy.
- LiveCast binds each sub-processor to data protection obligations no less protective than this DPA (flow-down).
- LiveCast will give notice before adding a sub-processor that handles personal information. If the Customer reasonably objects, the Customer may cancel per the Terms.
5. Service-provider certification
LiveCast will not sell Buyer Data or share it for cross-context behavioral advertising. LiveCast will not retain, use, or disclose Buyer Data for any purpose other than providing the services under the Terms, or outside the direct business relationship with the Customer. LiveCast will not combine Buyer Data with personal information from other sources except as permitted for service providers. LiveCast certifies that it understands these restrictions and will comply with them.
Internal service analytics use de-identified aggregates only. This section is what makes LiveCast a "service provider" under CCPA-style law rather than a third party or data broker.
6. Assistance and breach notification
- The Service gives the Customer built-in tooling to honor buyer requests: access (view records), deletion, and anonymization (replace the handle with a neutral ID so totals survive while the person is removed). LiveCast provides reasonable further assistance where the tooling is not enough.
- LiveCast will notify the Customer without undue delay after confirming a breach of security affecting Buyer Data, with enough information for the Customer to meet their own notification duties.
7. Return and deletion
When the Terms end, the Customer has a 30-day export window for their data, including Buyer Data. After the window, LiveCast deletes Buyer Data from the live systems and lets backups age out on schedule. The Customer may instead choose anonymization for records they must keep for accounting totals.
8. Term and order of precedence
- This DPA runs as long as the Terms of Service do.
- If this DPA and the Terms conflict about Buyer Data, this DPA controls.
Questions about this DPA: legal@livecastsystems.com