Data processing addendum

Scope and roles

This addendum applies when BufferSol Technologies LLC processes personal data on your behalf while you use the service, for example user and device details read from your own Microsoft tenant. You are the controller and we are the processor. It forms part of the terms of service.

Details of processing

• Subject matter: packaging, publishing and updating apps in your Intune tenant, reading device counts and keeping an audit log.
• Duration: while your account is open, plus the deletion period in the privacy policy.
• Data subjects: your administrators and team members, and the users of devices in tenants you connect.
• Data types: admin names and work email addresses, tenant IDs, device and group identifiers returned by Microsoft Graph, app, version and ring metadata, audit log entries and IP addresses.

Our obligations

• We process personal data only on your documented instructions, which are these terms and your use of the service.
• Everyone with access is bound by confidentiality.
• We apply the security measures described on the security page.
• We help you answer data subject requests and meet your security and breach duties, taking into account the nature of processing.
• We notify you without undue delay, and within 72 hours where we can, after becoming aware of a personal data breach.
• On termination we delete or return the data as described in the privacy policy, unless the law requires us to keep it.
• We give you the information you reasonably need to show compliance and allow audits through a written questionnaire once a year.

Subprocessors

You authorize the subprocessors on our subprocessors page. We will give you at least 14 days notice before adding or replacing one, and you may object on reasonable grounds.

International transfers

Where personal data moves from the EEA, UK or Switzerland to a country without an adequacy decision, the Standard Contractual Clauses (module two, controller to processor) and the UK addendum apply and are incorporated here.

Contact and signed copy

A print friendly copy is at /api/legal/dpa?download=1, and it includes the subprocessor list as Annex 1. To request a countersigned copy, email contact@buffersoltech.com. Our address is 447 W Broadway, 2nd Floor Suite #1964, New York, NY 10013, United States.