Data Processing Addendum

1. Roles

The facility owner (the customer) decides why and how tenant personal information is used. In data protection terms, the customer is the controller or business. Hive Asset Group, LLC ("Stitch") is the processor or service provider.

2. What we process and why

We process the personal information the customer or their tenants enter into Stitch, such as names, contact details, unit and lease records, payment status and messages. We process it only to provide the Stitch service to the customer and for the purposes in the Terms of Service.

3. Our commitments

• We process tenant information only on the customer’s documented instructions, which include using the product, and as the law requires.
• We make sure people who can access the information are bound to keep it confidential.
• We keep appropriate technical and organizational security measures. Our security page describes the main ones.
• We do not sell tenant information and do not use it for our own advertising.
• We help the customer respond to requests from tenants about their information, where the customer cannot do so using the product.

4. Subprocessors

The customer agrees that we may use service providers to process tenant information. Today these include Stripe (payments), Supabase (database and sign-in) and Netlify (hosting), plus email and text message providers used to deliver messages the customer sends. We stay responsible for their work and require them to protect the information.

We will tell customers before we add a new subprocessor that handles tenant information. A customer who objects for a good reason can contact us, and if we cannot resolve it, the customer may cancel.

5. Security incidents

If we learn of a security incident that affects tenant information we process for the customer, we will tell the customer without undue delay and share what we know so the customer can meet its own duties.

6. Return and deletion

The customer can export its data at any time. After the customer’s account ends, we keep the data for a reasonable period so it can be exported, then delete or anonymize it, unless the law requires us to keep it.

7. Information and audits

On reasonable request, we will give the customer the information needed to show we are following this addendum. The customer may not run an on-site audit without our agreement.

8. Where data is processed

Tenant information is stored and processed in the United States.

9. Order of precedence

If this addendum conflicts with the Terms of Service on the handling of personal information, this addendum controls.

10. Contact

Questions about this addendum: support@stitchstorage.com.