Data Processing Addendum
Version
1.1
Feb 23, 2026
Brandy Data Processing Addendum
Roles
Merchant is the Data Controller. Brandy acts as Data Processor for Shopify customer data and as Data Controller for Consumer App data.
Scope of Processing
Processing is limited to referral attribution, verification of first-time purchases, billing generation, and fraud prevention.
Security Measures
Encryption of identifiers, HTTPS transmission, secure cloud hosting, and access controls are implemented.
Subprocessors
Brandy may use subprocessors under written agreements ensuring equivalent data protection obligations.
International Transfers
Appropriate safeguards including Standard Contractual Clauses are implemented where required.
CCPA Service Provider Terms
Brandy does not sell personal information and processes data solely to provide services.
Contact
Brandy Inc.
United States talktoahuman@brandyplatform.com