This is a plain-language summary for design. The binding DPA must be drafted or reviewed by a lawyer.
Roles
The customer is the data controller for the data they upload. wonable is the processor.
Scope
Covers what data is processed and for what purpose: qualifying tenders, pricing bids, and drafting proposals.
Fraud and abuse prevention
wonable logs the IP address associated with each new signup as a security measure to detect duplicate or abusive account creation. This IP is stored alongside the company record and retained for the life of the account.
Sub-processors
The infrastructure providers used to run the service, with data kept in Canada.
Security and breach notification
Security commitments and a process for notifying you of a breach, to be finalized by counsel.
Data return and deletion
Your data is returned or deleted on account closure.
References
This addendum references the Privacy Policy and the Terms of Service.