Data Processing Addendum
Business customers who use BM-i Studio to process personal data of their own clients, audiences or staff can sign our Data Processing Addendum (DPA) with BrightMinds Digital Marketing Corporation. In it we act as processor on your documented instructions.
What the DPA covers
- processing only to provide, secure and support the Service, on your lawful instructions;
- confidentiality, risk-appropriate security, and help with data-subject requests, impact assessments and breach duties;
- notice without undue delay after we confirm a personal-data breach affecting your data;
- deletion or return of data at the end of the agreement, subject to law;
- our service providers (subprocessors), with advance notice of new ones and a way to object on data-protection grounds; and
- lawful safeguards for cross-border transfers.
Our service providers fall into these categories: hosting and infrastructure, AI and media generation, payments, email and communications, and storage, plus security and error monitoring. The named list and our security measures are shared with business customers under a confidentiality agreement.
Request the DPA
Email legal@bm-i-suite.com with your company's legal name and workspace. See also the Privacy Policy.