Version: 1.2.0 Status: Template for Business / Enterprise customers — counsel must finalize. Effective date: September 9, 2026
Parties
Controller: Customer Processor: FreeSocial Hub legal entity
Scope
Processor processes personal data on behalf of Controller solely to provide the Service, including: hosting workspace content; Hub desk chat and specialist briefs; agent/session/work-log metadata; optional account profile photos; Sources and Brand Kit; optional connected-account metadata; AI requests as instructed; collaboration features; and Web Push subscriptions when enabled by end users.
Obligations
- Process only on documented instructions
- Confidentiality for personnel
- Security measures (encryption, access control, RLS, logging)
- Subprocessor notice and flow-down
- Assist with data subject requests
- Breach notice without undue delay
- Delete or return data on termination (subject to legal retention), including account-deletion requests completed without undue delay and within 30 days except where law requires a hold
- Audit rights as mutually agreed
International transfers
SCCs or equivalent where required.
Liability
As allocated in the MSA / Terms, subject to mandatory law.
---
*Replace with counsel-approved DPA before offering Business contracts.*