Data Processing Addendum

Version

1.1

Feb 23, 2026

Brandy Data Processing Addendum

Roles

Merchant is the Data Controller. Brandy acts as Data Processor for Shopify customer data and as Data Controller for Consumer App data.

Scope of Processing

Processing is limited to referral attribution, verification of first-time purchases, billing generation, and fraud prevention.

Security Measures

Encryption of identifiers, HTTPS transmission, secure cloud hosting, and access controls are implemented.

Subprocessors

Brandy may use subprocessors under written agreements ensuring equivalent data protection obligations.

International Transfers

Appropriate safeguards including Standard Contractual Clauses are implemented where required.

CCPA Service Provider Terms

Brandy does not sell personal information and processes data solely to provide services.

Contact




Brandy Inc.
United States talktoahuman@brandyplatform.com