Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Terms of Service or other written or electronic agreement between Rook Development, LLC ("Rook", "Processor", "we", "us", or "our") and the entity identified as the customer ("Customer", "Controller", "you", or "your") for the provision of Rook's services (the "Services").

This DPA reflects the parties' agreement with respect to the processing of personal data by Rook on behalf of the Customer in connection with the Services. This DPA is supplemental to, and forms an integral part of, the Terms of Service and is effective upon its incorporation into the Terms of Service, which may be specified in the Terms of Service, an Order, or an executed amendment to the Terms of Service.

"Data Protection Laws" means all applicable laws and regulations regarding the processing of Personal Data, including but not limited to the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

"Personal Data" means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Scope and Purpose

The scope and purpose of the processing of Personal Data by Rook is the provision of the Services to Customer as specified in the Terms of Service. Rook shall process Personal Data only in accordance with Customer's documented instructions.

Duration

Rook will process Personal Data for the duration of the Terms of Service, unless otherwise agreed upon in writing, or until such data is deleted in accordance with Customer's instructions or the terms of the Terms of Service.

Categories of Data Subjects

The categories of Data Subjects whose Personal Data may be processed under this DPA include Customer's end users, employees, contractors, and other individuals whose Personal Data is processed through the Services.

Types of Personal Data

The types of Personal Data that may be processed under this DPA include contact information (such as name, email address, phone number), account credentials, IP addresses, and any other Personal Data that Customer or its users choose to include in the content processed by the Services.