Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Feedmate Terms of Service and applies when you use Feedmate to process personal data of other people as a business ("Customer"). By accepting the Terms of Service you also accept this DPA: no separate signature is needed. It follows Article 28 of the EU General Data Protection Regulation (GDPR) and the equivalent UK rules.

1. Roles

For the personal data you put into Feedmate (your content, your documents, the connected accounts and the people who appear in them), you are the controller and Feedmate is your processor. For the data we need to run our own business (your account, billing, security logs), Feedmate is an independent controller, as described in the Privacy Policy. Feedmate is operated by Romeo Muço, trading as Feedmate, sole trader (NIPT M56507204I), Lagjja Hajro Cakerri, pasuria nr. 13/411/ND2, Vlorë 9401, Albania.

2. Subject matter, duration, nature and purpose

• Subject matter: providing the Feedmate service described in the Terms of Service.
• Duration: for as long as your account exists, plus the deletion periods in section 9.
• Nature: storage, organisation, AI-assisted generation and editing, scheduling, and publishing to the social accounts you connect.
• Purpose: only to provide the service you asked for, following your instructions.

3. Types of personal data and data subjects

• Types of data: names, usernames, pictures and videos, text you write or upload, information in your documents and website, identifiers of the connected social accounts, and public data of the reference accounts used by the service.
• Data subjects: you and your team, your customers and audience as they appear in your content, people shown in the media you upload, and the owners of public reference accounts.
• Special categories of data: the service is not designed for them. Please do not upload health data, data about children or other sensitive data unless you have a lawful basis and it is necessary.

4. Our obligations

• We process personal data only on your documented instructions, which are the Terms of Service, this DPA and the settings you choose in the app. If we believe an instruction breaks data protection law, we tell you.
• Everyone at Feedmate who can access personal data is bound by confidentiality.
• We apply the security measures listed in section 6.
• We help you, as far as reasonably possible, to answer requests from data subjects (access, correction, deletion, portability, objection) and to carry out data protection impact assessments or consultations with authorities when they concern the service.
• We make available the information needed to show compliance with this DPA (section 10).

5. Sub-processors

You give us a general authorisation to use sub-processors. The categories we use and their locations are listed at feedmate.ai/subprocessors. We bind each sub-processor to data protection obligations at least as protective as this DPA and remain responsible for its work. We announce any new category of sub-processor or change of location at least 14 days in advance by updating that page and by email to account owners; within that period you may object on reasonable data protection grounds, and if we cannot address the objection you may close your account and receive a pro-rata refund of any prepaid period.

6. Security measures

• Encryption in transit (TLS) for all connections, and encryption at rest for the database and file storage.
• Social access tokens stored encrypted; we never store your social media passwords.
• Isolation of each workspace at database level, so one customer cannot access another customer's data.
• Access to production systems limited to the people who run the service, with individual credentials.
• Daily backups kept outside the main database provider, with a periodic restore test.
• Monitoring of errors and of the health of the service, with alerts to our team.

7. Personal data breaches

If we become aware of a personal data breach affecting your data, we notify you without undue delay, and where possible within 48 hours, by email to the account owner. We give you the information we have about the nature of the breach, the data and people concerned, its likely consequences and the measures taken, so that you can meet your own obligations.

8. International transfers

Some sub-processors are located outside the EU/EEA, as shown on the sub-processors page. Where personal data is transferred outside the EU/EEA, the transfer relies on an adequacy decision or on the European Commission's Standard Contractual Clauses, with the additional measures they require. Feedmate itself is established in Albania.

9. Return and deletion

You can delete your content at any time from the app and ask us for a copy at support@feedmate.ai. When you delete your account, we delete the personal data we process on your behalf within 30 days, including from active systems, and it disappears from backups when they expire (at most 14 days for daily backups and 12 months for monthly ones). We keep only what the law requires us to keep, such as invoices.

10. Information and audits

On written request, we provide the information reasonably needed to show that we meet this DPA, including answers to security questionnaires. If that is not enough, or if an authority requires it, you may carry out an audit, at your cost, with at least 30 days' notice, during business hours and under confidentiality, no more than once a year.

11. Liability and order of precedence

The limitations of liability in the Terms of Service apply to this DPA, except where the law does not allow them. If this DPA and the Terms of Service conflict on the processing of personal data, this DPA prevails. We may update this DPA; material changes follow the notice rules of the Terms of Service.

12. Contact

Questions about this DPA or a request under it: support@feedmate.ai.

Last updated: 8 October 2026 · Contact: support@feedmate.ai

Feedmate: Romeo Muço, trading as Feedmate, sole trader (NIPT M56507204I), Lagjja Hajro Cakerri, pasuria nr. 13/411/ND2, Vlorë 9401, Albania. Support: support@feedmate.ai