Data Processing Agreement

LAST UPDATED: APR. 25, 2025


This Data Processing Agreement (“DPA”) forms part of our Terms of Service between roometron.com (“Platform”) and the user (“Customer”), and applies when we process personal data on your behalf in connection with our services.

Definitions

- "Personal Data": Any information relating to an identified or identifiable natural person.

- "Processing": Any operation on personal data, such as storage or retrieval.

- "Controller": The Customer who determines the purpose and means of the data processing.

- "Processor": Platform, which processes data on behalf of the Controller.

Scope

We process personal data solely to provide our services, which may include the storage and display of user-provided personal imformation and uploaded content such as media files and project details.

Processor Obligations

We will:

- Process data only under documented instructions from the Customer.

- Maintain appropriate technical and organizational security measures.

- Ensure confidentiality and training of personnel with data access.

- Assist the Customer in responding to data subject requests (e.g., access, deletion).

Subprocessors

We may engage third-party service providers (e.g., AWS). A list of subprocessors is available on request. We will ensure all subprocessors comply with data protection obligations.