Data Processing Addendum

The customer is controller or processor, as applicable, and Tech Innovation Hub LLC is its processor for customer-uploaded seller, team, buyer, and order data. We process that data only to provide, secure, support, and improve the contracted Service, comply with documented customer instructions, or meet legal obligations.

Data subjects may include customer personnel, storefront buyers, recipients, and contacts. Data may include account identifiers, contact and shipping details, order and personalization data, integration tokens, support communications, and technical logs. Customers must have a lawful basis for submitting the data.

Personnel and contractors with authorized access are subject to confidentiality obligations. PrintMind uses access controls, encryption for sensitive integration credentials, transport encryption, logging, rate limits, code review, and automated release checks appropriate to the service risk. See the Trust Center.

The customer authorizes the providers in the Subprocessor Register. We will keep that register current and use provider contractual transfer safeguards where personal data moves across borders. A customer may object to a new subprocessor on reasonable data-protection grounds.

We will reasonably assist with data-subject requests, impact assessments, regulator inquiries, and security incidents considering the nature of processing. We will notify affected customers without undue delay after confirming a personal-data breach. On termination, customers may export available data and request deletion, subject to legal holds and encrypted backup expiration.

We will provide information reasonably necessary to demonstrate compliance. On-site audits require advance notice, confidentiality, reasonable scope, and reimbursement of extraordinary costs unless law or a confirmed breach requires otherwise.