Data Processing Addendum

Roles

You are the controller (or a processor for your customer). Media Yard LLC is the processor for personal data contained in usage events and account records needed to provide the service.

Instructions

We process that data only to provide UsageMill: ingest, store, aggregate, display in the log, and — on your instruction via configuration — send quantities to Stripe. We will not process it for our own marketing.

Security

Access is limited to operators who need it. API keys are stored hashed. Sessions are signed cookies. Production should use TLS, a private DATABASE_URL, and a SESSION_SECRET of at least 32 bytes.

Subprocessors

Infrastructure, database, transactional email, and Stripe. We remain responsible for their processing under this DPA. A current list is available on request at legal@usagemill.com.

International transfers

If you are in the EEA/UK/Switzerland and we transfer personal data to the United States, we rely on an approved transfer mechanism (typically the SCCs) plus the measures in this DPA.

Assistance and deletion

We will help with data-subject requests that concern the service, and delete or return workspace data within 30 days after a valid deletion request or account close, unless law requires a longer hold.

Operator

Media Yard LLC, PO Box 73, Pennsauken, NJ 08110.