Data Processing Addendum (DPA)

Data Processing Addendum (DPA)

Effective: February 26, 2026

This Data Processing Addendum (“DPA”) forms part of the Terms of Service between InfluenceLayer (“Processor”) and the Customer (“Controller”).

1. Scope

InfluenceLayer processes personal data solely to provide AI visibility analytics services as described in the Terms of Service.

2. Categories of Data

Personal Data may include:

• Account information (name, email, role)
• Billing information (processed via Stripe)
• Usage metadata

InfluenceLayer does not process sensitive personal data or private AI conversation content.

3. Processing Instructions

Processor shall:

• Process data only on documented instructions from Customer
• Maintain confidentiality
• Implement appropriate technical and organizational security measures

4. Subprocessors

InfluenceLayer uses trusted subprocessors including:

• Cloud infrastructure providers
• Stripe (payment processing)
• Email delivery providers

A list of subprocessors is available upon request.

5. Security Measures

InfluenceLayer implements:

• Encryption in transit
• Encryption at rest
• Access controls
• Role-based permissions
• Logical workspace isolation

6. Data Transfers

Where applicable, data transfers outside the EEA are conducted using appropriate safeguards.

7. Data Deletion

Upon termination, personal data will be deleted within 30 days unless retention is legally required.

8. Contact

privacy@influencelayer.com