Legal
Data Processing Addendum
This page summarizes the Rewardez Data Processing Addendum (DPA) that governs how Rewardez processes personal data on behalf of customers.
Effective: January 1, 2026
Scope
The Rewardez DPA forms part of the master subscription agreement between Rewardez Technologies and the customer. It applies to all personal data processed by Rewardez as a processor on the customer's behalf.
Processor obligations
Rewardez processes personal data only on documented instructions from the customer, ensures personnel processing data are bound by confidentiality, implements appropriate technical and organizational measures, and assists the customer with their obligations under applicable data protection law.
Sub-processors
A current list of sub-processors is maintained at rewardez.com/legal/subprocessors. Rewardez provides 30 days' prior notice of any change in sub-processors, allowing customers to object on reasonable grounds.
International transfers
Where personal data is transferred internationally, Rewardez relies on the EU Standard Contractual Clauses (and analogous mechanisms in other jurisdictions) together with supplementary measures as required.
Requesting a signed DPA
Customers can request a counter-signed copy of the DPA from privacy@rewardez.com.