This Data Processing Agreement is designed for business customers who require GDPR/CCPA processing terms. It supplements our Terms of Service and Privacy Policy. For a countersigned copy, contact support@linklitepro.com.

1. Roles

For personal data you submit through the Service ("Customer Data"), you act as the data controller (or "business" under CCPA/CPRA) and Link‑Lite Data LLC acts as the data processor (or "service provider"). We process Customer Data only on your documented instructions, which include your use of the Service and this DPA.

2. Scope of processing

Item	Details
Subject matter	Provision of website intelligence & audit services
Duration	For the term of your subscription and until data deletion
Nature & purpose	Scanning submitted targets, storing results, generating reports and AI recommendations
Data subjects	Your authorized users and, incidentally, individuals identifiable in public website/WHOIS data
Data categories	Account identifiers (name, email), submitted domains/URLs, scan results, technical data (IP, usage)

3. Our obligations

• Process Customer Data only on your instructions and for the purposes of providing the Service.
• Ensure personnel with access are bound by confidentiality.
• Implement appropriate technical and organizational security measures (see our Security page).
• Assist you, taking into account the nature of processing, with data‑subject requests and with security, breach‑notification, and impact‑assessment obligations.
• Notify you without undue delay after becoming aware of a personal‑data breach affecting Customer Data.
• Delete or return Customer Data at the end of the engagement, subject to legal retention requirements.

4. Sub‑processors

You authorize us to engage the sub‑processors listed in our Privacy Policy (currently Stripe, Google, our AI model provider, WHOIS/DNS data provider, and our cloud hosting/database provider). We remain responsible for their performance and will inform you of material changes so you may object on reasonable grounds.

5. International transfers

Customer Data is processed and stored in data centers located in the United States and India via our cloud hosting provider. Where Customer Data is transferred out of the EEA/UK, we rely on appropriate safeguards such as the Standard Contractual Clauses, which are incorporated by reference where applicable. Note: our GDPR/CCPA program is maturing alongside our hosting platform's certifications (ISO certified; SOC 2 Type I complete, Type II in progress); a countersigned DPA and current safeguards can be requested for procurement.

6. Data‑subject rights & audits

We will provide reasonable assistance to help you respond to data‑subject requests and will make available information reasonably necessary to demonstrate compliance, including responding to reasonable audit inquiries.

7. Contact

To execute this DPA or request our security documentation: support@linklitepro.com.