Data Processing Addendum

Last updated: August 2, 2026

01

1. Roles and Scope

This Data Processing Addendum ("DPA") forms part of the agreement between Linker Page Inc. ("Processor", "we", "us") and the customer organization or individual who uses Linker.page ("Controller", "you") when we process personal data on your behalf. For account, billing, and platform operations data described in our Privacy Policy, Linker Page Inc. acts as an independent controller. This DPA applies where you act as controller (or processor for your end customers) and we act as processor—for example, email subscriber lists you manage, campaign recipient data, and certain buyer contact data you instruct us to process through shop, booking, or messaging features. If you need a countersigned enterprise DPA, email support@linker.page with your legal entity name and registered address.

02

2. Subject Matter and Duration

Subject matter: hosting and processing of personal data you submit to the Service so we can provide Linker.page features you enable. Duration: for the term of your use of the Service and until deletion or return of personal data according to our retention practices and your deletion requests, unless longer retention is required by law. Nature and purpose: storage, transmission, display, email delivery, checkout/booking workflows, analytics you configure, and related support—solely on documented instructions from you (including configuration in the product) and as described in our Terms and Privacy Policy.

03

3. Types of Data and Data Subjects

Depending on features you use, categories may include: names, email addresses, phone numbers, shipping or billing addresses, order and booking details, message content, subscriber list fields, IP addresses, and similar identifiers. Data subjects may include your customers, leads, subscribers, tip donors, page visitors, and other end users whose data you submit or collect through the Service.

04

4. Processor Obligations

We will: • Process personal data only on your documented instructions, including via the Service UI and APIs, unless required by law • Ensure persons authorized to process personal data are bound by confidentiality • Implement appropriate technical and organizational security measures • Not engage a subprocessor without the safeguards described in Section 5 • Assist you, where reasonably possible, with data subject requests and DPIAs, taking into account the nature of processing • Delete or return personal data after the end of services, subject to legal retention and backup cycles • Make available information reasonably necessary to demonstrate compliance with this DPA

05

5. Subprocessors

You authorize us to engage subprocessors to provide the Service. Our current list is published at linker.page/subprocessors and may be updated from time to time. We impose data protection terms on subprocessors that are no less protective than those in this DPA for the services they provide. We remain responsible for subprocessors' performance of their obligations. If we add or replace a material subprocessor, we will update the public list. Continued use of the Service after an update constitutes acceptance of the change for processing necessary to operate the Service. Enterprise customers with a signed DPA may receive notice terms as agreed in writing.

06

6. International Transfers

Where we transfer personal data from the EEA, UK, or Switzerland to a country without an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses (and UK/Swiss addenda where required), as further described in our Privacy Policy and subprocessor arrangements.

07

7. Security and Incidents

We maintain technical and organizational measures designed to protect personal data against unauthorized access, loss, or alteration, including encryption in transit, access controls, and monitoring. No system is perfectly secure. If we become aware of a personal data breach affecting data we process for you, we will notify you without undue delay and provide information reasonably available to help you meet your own notification obligations.

08

8. Audits and Contact

Upon reasonable written request, and no more than once per twelve months (unless a supervisory authority requires otherwise), we will provide information or reports reasonably necessary to demonstrate compliance with this DPA, subject to confidentiality and the security of other customers. Governing law and disputes follow our Terms of Service unless a signed enterprise agreement states otherwise. Contact: support@linker.page Linker Page Inc., 8 The Green, STE B, Dover, DE 19901, United States

Contact: support@linker.page

Linker Page Inc.
8 The Green, STE B, Dover, DE 19901, United States