Data Processing Agreement (DPA)

Last Updated: March 5, 2026

1. Overview

This DPA applies to Event Organizers (the "Data Controller") and ConnectSphere(the "Data Processor"). It outlines our obligations for processing personal data on your behalf.

2. Scope of Processing

We process attendee data only as required to provide the ephemeral networking services. This includes:

Managing event room access via codes/QR.
Facilitating live chat between participants.
Storing and displaying photos in the Media Hub.

3. Security Measures

We implement robust security measures to protect user data, including:

Encryption: All data is encrypted in transit and at rest.
Access Control: Granular permissions based on user roles (Admin, Organizer, Attendee).
Data Isolation: Event data is isolated within room-specific schemas.

4. Sub-processors

We use reputable third-party sub-processors to power our platform, including:

Supabase / AWS: Database and File Storage.
LinkedIn: Authentication Provider.
Vercel: Platform Hosting.

5. Assistance with Data Subject Requests

We will assist Organizers in fulfilling their obligations to respond to data subject requests (e.g., requests for deletion or access) made by event attendees.