Data Processing Agreement

Introduction

This Data Processing Agreement (“DPA”) forms part of the agreement between SnowTown Ventures Private Limited (“processor”) and the customer (“controller”) for the processing of personal data in connection with our AI event management platform. Enterprise customers can request a signed copy.

1. Roles of the Parties

The customer acts as the data controller and SnowTown acts as the data processor. We process personal data only on the customer's documented instructions, including those set out in the agreement.

2. Nature and Purpose of Processing

We process personal data to provide event planning, registration, live operations, networking, and analytics features.

• Registration and attendee details
• Event operational data
• Engagement and sentiment data

3. Sub-processors

We engage vetted sub-processors, such as cloud infrastructure, analytics, and email providers, under agreements that impose data protection obligations equivalent to those in this DPA. A current list is available on request, and we give notice of changes.

4. Confidentiality

Personnel authorized to process personal data are bound by confidentiality obligations.

5. Security Measures

We maintain encryption in transit and at rest, multi-tenant isolation, access controls, logging, and ongoing monitoring appropriate to the risk.

6. Assistance to the Controller

We assist the controller, taking into account the nature of processing, in responding to data subject requests and in meeting security, breach notification, and impact assessment obligations.

7. Data Breach Notification

We notify the controller without undue delay after becoming aware of a personal data breach affecting their data, with the information reasonably available to us.

8. International Transfers

Where personal data is transferred across borders, we apply appropriate safeguards such as standard contractual clauses.

9. Return and Deletion

On termination, we return or delete personal data at the controller's choice, except where retention is required by law.

10. Audits

We make available information reasonably necessary to demonstrate compliance and allow for audits in line with the agreement.

11. Contact

For DPA requests or to receive a signed copy, email legal@snowtownventures.com.