Seekmodo
Log inStart free trial

Data Processing Addendum

Effective: 2026-05-26

This DPA forms part of your subscription agreement. It describes how Numinix Software Solutions Inc. ("Processor") processes personal data on behalf of the customer ("Controller").

1. Subject matter

Processing of catalog documents, search queries, and click events sent through Seekmodo for the purpose of providing search and AI-surfacing services.

2. Categories of data subjects

  • End-shoppers visiting the Controller's storefront.
  • Account holders managing the Seekmodo subscription.

3. Categories of personal data

  • Search query strings (may include free-text user input).
  • Pseudonymous session IDs and IP addresses (last 30 days).
  • Account email and bcrypt-hashed password.

4. Sub-processors

We use the following sub-processors. Material changes are communicated 30 days in advance and you may terminate without penalty if you object.

  • PayPal (Holdings) Inc. — subscription billing.
  • Postmark (ActiveCampaign LLC) — transactional email.
  • Cloudflare, Inc. — DNS, CDN, WAF, email routing.

5. Security measures

See the Security page for the live list. Highlights: TLS 1.3 in transit, AES-256 at rest, HMAC request signing, replay-window enforcement, per-tenant rate limits, and audit logging.

6. Sub-processor agreements

We have signed DPAs in place with each sub-processor that receives personal data on our behalf.

7. Cross-border transfers

Where personal data of EU/UK residents is transferred to the US, we rely on Standard Contractual Clauses (SCCs) executed with the relevant sub-processor.

8. Term & termination

This DPA applies for as long as the subscription agreement is in force. On termination, we delete or return personal data within 30 days unless retention is legally required.

9. Contact

Data-protection enquiries: [email protected].