Data processing addendum

This Data Processing Addendum (“DPA”) is between the organization using the WXNetMan application (“organization,” “you”) and Brian Bathe, an Ohio sole proprietor doing business as WXNetMan (“WXNetMan,” “we,” “us”). It is part of the Terms of use. If you use the application for an organization, the organization accepts this DPA.

This DPA covers Customer Data in the application. It does not cover the public marketing website or access-request email you send to support@wxnetman.com. Those are described in the Privacy notice.

If your organization needs a signed copy of this DPA, email support@wxnetman.com. We will sign this published text. We do not negotiate a different standard DPA for each organization.

Definitions

Customer Data means operational records and related application information the organization or its members enter or generate in the service, including report answers, notes, assignments, delivery results, organization membership, display name, operator call sign, usual duty title, role, and the account email and credentials used to access that organization.

Process means to collect, store, use, transmit, or delete Customer Data as needed to provide the service.

Subprocessor means a provider WXNetMan uses to process Customer Data on our behalf. Destinations the organization configures, such as configured email recipients, Slack, or Discord, are not WXNetMan subprocessors.

Roles

The organization is the controller of Customer Data. WXNetMan is the processor. We process Customer Data only as needed to provide, secure, and operate the service, and as the organization configures in the application.

Instructions and purposes

We process Customer Data to:

• Provide and secure the WXNetMan application
• Maintain organization membership and role-based access
• Process, display, route, and preserve authorized operational reports
• Monitor reliability, troubleshoot issues, and prevent misuse
• Respond to support inquiries from the organization or its members

Those uses, the Terms, the Privacy notice, and the organization’s in-app settings are the organization’s instructions. We will not process Customer Data for other purposes.

Limits on use

We do not sell personal information. We do not use Customer Data for advertising. We do not use operational reports, even in aggregated or anonymized form, for analytics, advertising, or marketing.

Organization responsibilities

The organization is responsible for how its members use the service, who it invites, which destinations it configures, and whether it has a lawful basis to enter Customer Data. The organization must not use the application if it is located in the European Economic Area.

Security

WXNetMan uses authenticated access, role-based permissions, and organization-scoped data handling. Customer Data is encrypted in transit using HTTPS/TLS. The application is hosted in the United States on Amazon Web Services. We use technical and operational controls to protect Customer Data. No internet service can guarantee absolute security. On written request, we will describe current security practices at a reasonable level of detail.

Subprocessors

The organization authorizes WXNetMan to use subprocessors in these categories:

• Cloud hosting, storage, compute, and monitoring (currently Amazon Web Services)
• Email delivery for account and operational messages

We may replace a provider in the same category. Current categories are described in the Privacy notice. Providers used only for the public marketing website are described there and are not subprocessors under this DPA. We may update this DPA as described in the Terms when a change is material.

Security incidents

If we confirm a security incident that affects personal information in Customer Data, we will notify the organization contact we have on file and affected account holders at the email address on the account, as required by applicable law and as promptly as reasonably possible. We will notify no later than the deadline required by applicable law, unless law enforcement requires a delay. Details are in the Privacy notice.

Assistance with rights requests

If a member asks to access, correct, or delete personal information, we will handle that request as described in the Privacy notice: account credentials and contact information through support@wxnetman.com; organization records through the Net Manager or organization contact. Historical net records may keep attribution as described there.

Export and deletion

The organization may export operational records using available features in the application. We retain Customer Data while the organization’s account is active and for at least 60 days after we close the organization, so the organization can request export. We will notify the organization contact we have on file when an organization’s account is closed and again 14 days before records may be deleted. After that 60-day period, we may delete those records. Export records your organization is required to keep. Do not treat WXNetMan as the primary records repository.

California privacy law (CCPA/CPRA)

For California law (CCPA/CPRA), WXNetMan is a service provider and contractor with respect to Customer Data. We will not sell Customer Data. We will not retain, use, or disclose it except to provide the service, as permitted in this DPA, the Terms, and the Privacy notice, or as required by law.

Location

We process and store Customer Data in the United States. We do not host the application outside the United States. The application is intended for organizations in the United States only. We do not knowingly target or offer the application to organizations in the European Economic Area. If an organization is located in the EEA, it must not use the application.

Other terms

Nothing in this DPA waives any immunity from suit or liability to which either party is entitled under applicable federal, state, or local law.

This DPA is governed like the Terms: Ohio law, informal resolution then non-binding mediation, then an Ohio court, with no arbitration requirement. If this DPA conflicts with the Terms or Privacy notice on processing of Customer Data, this DPA controls. Pricing remains governed as described in the Terms.

We may update this DPA. Material changes follow the notice rules in the Terms.

Contact

WXNetMan is operated by Brian Bathe, an Ohio sole proprietor.

1891 Hart Rd.
Lebanon, OH 45036

Questions about this DPA can be sent to support@wxnetman.com.

Related: Terms of use and Privacy notice.