Data Processing Addendum

This Data Processing Addendum ("DPA") describes how DDM, operated by DeepDive Media Private Limited, a company incorporated in India with registered office at 4th Floor, Balaji Tech Tower 2, A-28C, Industrial Area, Sector 73, Sahibzada Ajit Singh Nagar, Punjab 160055, processes data on behalf of customers ("you") who use the Service. It supplements our Terms of Service.

1. Roles of the parties

For personal data contained in your connected advertising accounts, you act as the data controller and DeepDive Media Private Limited acts as a data processor, processing data only on your documented instructions through your use of the Service.

2. Scope & purpose

We process data solely to provide the Service — including dashboards, campaign management, automation, and reporting — and for no other purpose.

3. Data we process

• Advertising data from connected Business Managers (campaigns, ad sets, ads, metrics, pixels, pages).
• Account and contact details of your team members who use the Service.
• Configuration you create, such as templates and automation rules.

4. Security measures

• Encryption of data in transit and at rest.
• Secure, vaulted storage of access credentials, never exposed to the browser or logs.
• Role-based access controls and least-privilege access internally.
• Activity logging of changes made through the Service.

5. Sub-processors

We use a limited set of infrastructure and hosting sub-processors, each bound by data-protection obligations consistent with this DPA. A current list is available on request at contact@deepdivetech.app.

6. Data subject requests

We will assist you in responding to requests from individuals to access, correct, or delete their personal data, to the extent the data is within the Service.

7. International transfers

Where data is transferred across borders, we rely on appropriate safeguards consistent with applicable data-protection laws.

8. Meta data handling

Data obtained through Meta's APIs is processed in accordance with Meta's Platform Terms and Developer Policies. We request only necessary permissions, use the data only to provide your requested features, retain the minimum required, and cease access when you disconnect.

9. Breach notification

If we become aware of a personal data breach affecting your data, we will notify you without undue delay and provide information reasonably available to help you meet your obligations.

10. Deletion & return

On termination or upon request, we will delete or return your data, except where retention is required by law.

11. Contact