Data processing agreement (dpa) — Lettermint

Cited by

Facts read from this source

• Entity Report an error

  “Lettermint B.V., a private limited liability company incorporated under the laws of the Netherlands, registered with the Dutch Chamber of Commerce under number 99337711 and having its registered address at Willemsvaart 16 B, 8019 AB Zwolle, the Netherlands”

• Governing law Report an error

  “This DPA is governed by the laws of the Netherlands, unless mandatory Applicable Data Protection Law requires otherwise.”

• DPA automatic Report an error

  “This DPA applies automatically whenever Lettermint processes Controller Personal Data in connection with the Services.”

• Signed DPA available Report an error

  “Need a countersigned copy for your compliance records? Click the button below to fill out a short request form and we'll get it to you shortly.”

• Message retention Report an error

  “During the term of the Agreement, Lettermint retains message content, attachments, recipient addresses, message metadata, and message events for twenty-eight (28) days after the message is created”

• Analytics retention Report an error

  “Lettermint retains delivery and engagement events for analytics, and the hourly and daily totals calculated from them, for no longer than ninety (90) days after the event to which they relate.”

• Retrieval period Report an error

  “Controller shall have thirty (30) calendar days after the effective termination date to retrieve Controller Personal Data that remains available through the Services or to request its return.”

• Export format Report an error

  “Lettermint shall provide data available through standard export functionality in a commonly used, machine-readable format.”

• Encryption Report an error

  “encryption of Controller Personal Data in transit using TLS 1.2 or higher where supported by the communicating systems, encryption of Controller Personal Data at rest”

• Breach notification Report an error

  “Lettermint shall notify Controller without undue delay and in any event within twenty-four (24) hours after becoming aware of a Personal Data Breach.”

• Subprocessor notice Report an error

  “Lettermint shall actively inform Controller in writing, by email or an in-product notice, of an intended addition or replacement of a Subprocessor at least thirty (30) calendar days before the Subprocessor begins processing Controller Personal Data.”

• Subprocessor stripe payments Report an error

  “Payment providers, including Stripe, may process Business Relationship Data for billing and payment purposes. They do not receive Email Data or other Controller Personal Data from Lettermint for those purposes and are not Subprocessors under this DPA.”

• No data sale Report an error

  “Lettermint shall not sell Controller Personal Data or use it for advertising, unrelated profiling, or any purpose other than the provision, security, maintenance, and lawful operation of the Services”

• Public authority requests Report an error

  “Lettermint shall, unless prohibited by law: (a) notify Controller before disclosure; (b) review the legality and scope of the request; (c) challenge or seek clarification of a request where Lettermint reasonably considers this appropriate and legally available; and (d) disclose only the minimum Controller Personal Data legally required.”

• DPA amendment notice Report an error

  “For an existing Controller, Lettermint shall directly notify Controller of a material amendment by email or through the Services at least thirty (30) calendar days before it takes effect”

• DPA contact Report an error

  “Email: legal@lettermint.co”

• AI human review Report an error

  “AI-generated output shall not, by itself, be the sole basis for a permanent account suspension, termination, or another materially adverse action against Controller. Appropriate personnel shall review relevant output before such action is taken.”

• Backup encryption Report an error

  “including encrypted backups performed at least daily for relevant production systems”

• AI usage Report an error

  “Lettermint may use artificial-intelligence-assisted natural-language processing for the limited purposes of support-ticket triage and drafting and the detection, investigation, and handling of suspected abuse of the Services.”

7 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Lead Message logs, events & webhooks
• The Agency Lead Message data, retention & security
• The Agency Lead European sovereignty
• The Data Protection Officer Message logs, events & webhooks
• The Data Protection Officer Message data, retention & security
• The Data Protection Officer European sovereignty
• The Shop Operator Message logs, events & webhooks
• The Shop Operator Message data, retention & security
• The Shop Operator European sovereignty
• The Platform Engineer Message logs, events & webhooks
• The Platform Engineer Message data, retention & security
• The Platform Engineer European sovereignty
• The SaaS Developer Message logs, events & webhooks
• The SaaS Developer Message data, retention & security
• The SaaS Developer European sovereignty
• The Skeptic Message logs, events & webhooks
• The Skeptic Message data, retention & security
• The Skeptic European sovereignty