Data Processing Addendum

Scope & Roles

This Data Processing Addendum (DPA) supplements your contract with Akangbou when you handle attendee, supporter, or contractor data belonging to residents of regulated jurisdictions (GDPR, CCPA, LGPD). Akangbou acts as the data processor while you remain the controller.

Data Subject Types

• Event attendees and ticket holders.
• Marketplace supporters, waitlist participants, and shipping contacts.
• Contractor company administrators, staff, and invited collaborators.

Processing Instructions

• We process personal data only to deliver contracted services: reservations, messaging, analytics, payouts, and support.
• We follow your instructions as provided via dashboard settings, API calls, or documented support requests.
• We will not sell or reuse personal data for unrelated advertising.

Subprocessors

We rely on vetted subprocessors to operate the platform. Current list:

• Vercel – hosting and CDN.
• Supabase – database, authentication, file storage.
• Stripe – payment processing and payouts.
• Resend – transactional email.
• Sentry – error monitoring.

Data Subject Requests

• Submit DSARs to privacy@akangbou.com with the requester’s email, reservation ID, or supporter ID.
• We assist with access, export, correction, and deletion within 30 days (or faster where required).
• You are responsible for verifying the identity of the requester and documenting consent.

Security Measures

See the Security Policy for technical and organizational safeguards. We will notify you without undue delay (no later than 72 hours) after becoming aware of a personal data breach affecting your users.

International Transfers

Data is primarily stored in the United States. When exporting to other regions, we rely on Standard Contractual Clauses (2021/914) or equivalent lawful mechanisms.

Term & Termination

• This DPA remains in effect for as long as we process data on your behalf.
• Upon termination, you may request deletion or export of all data within 30 days.
• We may retain minimal data required for legal, tax, or auditing obligations.