Data Processing Agreement

This is the agreement we sign with each client about the personal data in the reviews we analyse for it. Our Privacy Policy covers the data we collect for ourselves.

This agreement is between Osman Yıldız, doing business as MDI Analytics ("MDI Analytics") and the client named in the order (the "Customer"). It forms part of the Customer's order and our Terms of Service, and covers the personal information MDI Analytics processes on the Customer's behalf.

1. Roles

The Customer decides why its review data is processed, and MDI Analytics processes it on the Customer's behalf, as a service provider. Each party complies with the data protection law that applies to it.

2. What is processed

• Purpose: to collect and analyse, including with AI, the public reviews of the Customer's branches, and show the results to the Customer in the MDI Analytics platform.
• Sources: the public pages of the Customer's branches on Google Maps and, where agreed, other review sites. MDI Analytics does not log into the Customer's accounts.
• Data: review text, rating, date and source, the reviewer's name or handle as published, and the analysis derived from them; and the names, work emails and logins of the Customer's users. Reviewer names are not shown in reports.
• Duration: for as long as the Customer's subscription lasts.

3. Instructions and confidentiality

MDI Analytics processes the data only to provide the service under the Customer's order and instructions, unless the law requires otherwise. Anyone MDI Analytics allows to handle the data must keep it confidential.

4. Security

MDI Analytics uses reasonable technical and organisational measures to protect the data, including individual logins, separation of each customer's data, and encrypted connections. MDI Analytics does not use the Customer's data to train AI models.

5. Service providers

The Customer allows MDI Analytics to use service providers (sub-processors) to deliver the service, such as those listed below. MDI Analytics may change them, keeps this list current, and remains responsible for their work. Some process data outside the Customer's country, including in the United States.

6. Assistance and incidents

MDI Analytics forwards to the Customer any request it receives from an individual about the Customer's data, and gives reasonable help in answering it. If a security incident affects the Customer's data, MDI Analytics tells the Customer without undue delay.

7. End of the service

When the subscription ends, MDI Analytics deletes or anonymises the Customer's personal data within a reasonable time, unless the law requires keeping it or the Customer asks to keep it for a possible restart.

8. General

On request, MDI Analytics provides the information reasonably needed to show it complies with this agreement. Where this agreement and the Terms of Service differ on personal data, this agreement prevails.

The Customer accepts this agreement by accepting an order or invoice that refers to it, or by signing a copy of it.

Paddle and Payoneer handle payments for themselves, not on the Customer's behalf, so they are not sub-processors.