GuildPass
Legal

Data Processing Addendum

Effective date: December 1, 2025

DATA PROCESSING ADDENDUM (DPA)

This Data Processing Addendum ("DPA") is part of the Terms of Service between GuildPass LLC ("Processor") and the Creator ("Controller"). This DPA ensures compliance with GDPR, CCPA, and related regulations.

1. Definitions

  • "Personal Data" means Discord IDs, Stripe customer IDs, and related metadata.
  • "Processor" means GuildPass LLC.
  • "Controller" means the creator using the platform.

2. Processing Instructions

GuildPass processes Personal Data solely to:

  • manage Discord roles
  • sync subscription status
  • provide dashboards and logs

No other use is permitted.

3. Sub-processors

GuildPass uses:

  • Stripe
  • Discord
  • AWS / Render / Neon / storage providers

All sub-processors maintain compliant data standards.

4. Security Measures

GuildPass implements:

  • encryption
  • network security
  • credential management
  • logging
  • access restrictions
  • regular updates

5. Data Subject Rights

GuildPass will assist Controllers in responding to:

  • access requests
  • deletion requests
  • correction requests
  • export requests

6. Deletion

Upon request or account termination, GuildPass deletes:

  • role mappings
  • subscription mappings
  • member records
  • OAuth tokens

Log data may be retained for legal and security reasons.

7. Governing Law

This DPA is governed by Texas law.