Last updated 4 July 2026
This Data Processing Addendum ("DPA") forms part of the agreement between 3rdrock dev LLC, operating as porterzip ("porterzip", "we", "us"), and the business customer ("Customer", "you") that uses porterzip. It applies where you upload personal data about your own customers and we process it on your behalf. Where signed or accepted with the Terms of Service, it is incorporated into them. If there is a conflict on data processing, this DPA controls.
For the data you upload about your own customers, you are the controller and business, and we are your processor and service provider. We process that data only to provide the service to you. For our own account holders, prospects and website visitors, we are the controller, and our Privacy Policy governs that data.
We process your uploaded data only on your documented instructions, which include the Terms of Service and your use of the service, and solely to deliver the targeting and measurement outputs the service provides. We do not process it for any other purpose. If we believe an instruction breaks the law, we will tell you.
The data you upload is first-party customer data, which can include postal addresses, email addresses, ZIP codes and order or donation history. It concerns your customers. Processing lasts for the term of your use of the service and the limited period described in section 8.
You authorize us to use our current subprocessors, a named list of which is available on request, each under a contract that binds it to data protection terms no less protective than this DPA. We will give reasonable prior notice of a new subprocessor on request, and you may raise a reasonable objection.
We maintain technical and organizational measures designed to protect your data, including encryption in transit and at rest, hashing of uploaded email addresses at ingest, passwordless sign-in with no stored passwords, access controls and the principle of least privilege, tenant isolation between customers, and encrypted database backups. No method is completely secure, but we work to protect your data and improve these measures over time.
If we become aware of a breach affecting your uploaded data, we will notify you without undue delay, share the information we reasonably have, and assist you in meeting your own notification duties.
We will assist you, taking into account the nature of the processing, in responding to requests from your customers to access, correct or delete their data, and in meeting your security and impact-assessment duties. On your request or on termination, we will delete or return your uploaded data within a reasonable period, except where law requires us to keep it. Raw uploaded files are held only long enough to process them and are then deleted.
On reasonable request and no more than once a year, unless a regulator or a breach requires otherwise, we will make available the information reasonably necessary to demonstrate our compliance with this DPA.
porterzip is built for the United States and we process and host data in the United States. If any processing occurs outside your country, we will apply appropriate safeguards for that transfer.
This DPA is governed by the laws of the State of Wyoming, United States. Except as stated here, the Terms of Service, including their limitation of liability, continue to apply. This DPA takes effect for as long as we process your uploaded data.
3rdrock dev LLC, operating as porterzip. [email protected], or by mail to 3rdrock dev LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA.