Data Processing Addendum

Last updated: 2026-11-09

1. Scope

This Data Processing Addendum (the "addendum") is part of the terms of service for Email Clipper for Notion between you, the customer, and Sweekly Apps LLC, a Wyoming limited liability company, 30 N Gould St Ste N, Sheridan, WY 82801, United States ("we"). It applies when we process personal data on your behalf as your processor while providing the product, for example data about your customers, users or contacts, under the EU or UK General Data Protection Regulation or a similar data protection law. Data we use for our own purposes, such as your account and billing details, is covered by our privacy policy instead. If this addendum and the terms disagree on data protection, this addendum wins.

2. Your instructions

We process that personal data only on your documented instructions. The terms, this addendum and the way you set up and use the product are your instructions. We do not use the data for our own purposes, sell it or use it for advertising. If a law requires us to process it otherwise, we tell you first unless that law forbids it. If we believe an instruction breaks data protection law, we tell you.

3. Confidentiality and security

Only people who need the data to run the product can access it, and they are bound by confidentiality. We keep appropriate technical and organisational measures to protect it: data travels over HTTPS; access tokens and keys the product stores are encrypted; only the product's code and the sub-processors below process it; and it is stored in the United States.

4. Sub-processors

You authorise the sub-processors listed here and in our privacy policy:

Each is bound by a written contract with data protection obligations no weaker than this addendum, and we remain responsible for them. We tell you about a new or replaced sub-processor at least 30 days before it starts, in the product or by email, and update the list. You can object by emailing support@sweekly.app; if we cannot meet the objection, you can cancel, and we refund the unused part of any prepaid period.

5. Helping you

Taking into account the nature of the processing, we help you answer requests from people exercising their data protection rights, and pass on to you any such request we receive about your data. We also help you with security, breach notifications, data protection impact assessments and consultations with a supervisory authority where the law requires them.

6. Personal data breaches

We notify you without undue delay after becoming aware of a personal data breach affecting your data, with the information we have and what we are doing about it, and we keep you updated.

7. Deletion at the end

When you stop using the product, the personal data is deleted within 30 days of uninstall, or when you ask, unless the law requires us to keep it. Before you leave, you can ask for a copy by emailing support@sweekly.app.

8. Information and audits

We make available the information needed to show that we meet this addendum and Article 28 of the GDPR, and we allow audits, including inspections, by you or an auditor you mandate, on 30 days' written notice, at your cost, and not more than once a year unless a supervisory authority requires it or after a personal data breach.

9. International transfers

Where personal data protected by the GDPR is transferred to us or a sub-processor in a country without an adequacy decision, the standard contractual clauses approved by Commission Implementing Decision (EU) 2021/914 are incorporated into this addendum: Module Two where you are a controller and Module Three where you are a processor, with you as data exporter and us as data importer. Clause 7 applies; under Clause 9, option 2 applies with the notice period in section 4; the option in Clause 11 does not apply; under Clauses 17 and 18, the law and courts of Ireland apply. Annex I is section 11, Annex II is section 3, and Annex III is the list in section 4; the competent supervisory authority is that of the Member State where you are established, or else where our EU representative is.

For data protected by the UK GDPR, the UK International Data Transfer Addendum to those clauses is incorporated, with the same details; for Swiss data, references to the GDPR mean the Swiss Federal Act on Data Protection. Where a recipient is certified under the EU–U.S. Data Privacy Framework (or its UK or Swiss extension), the transfer may rely on that framework instead.

10. Term and liability

This addendum lasts as long as we process personal data on your behalf. Liability under it is subject to the limitation of liability in the terms, except where the standard contractual clauses or the law do not allow that.

11. Details of the processing