Data Processing Agreement
This document is a placeholder pending legal review. It describes how the platform works today and is not legal advice. If you need a signed data processing agreement, get in touch.
This agreement applies between you (the controller) and Evergreen West LLC, of 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States, which operates RankPrima (the processor).
1. Roles
For the data you put into the platform — your business details, your contacts, your customer lists — you are the controller and we are the processor. For our own visitor and customer records we are the controller ourselves; that is covered in our privacy policy.
2. What we process, and why
We process only what is needed to deliver the service you buy:
- Business data: name, address, phone number, website, opening hours and services of the businesses you manage.
- Contact data: name, email address and phone number of the people you add to the platform.
- Usage data: who signed in when and what actions were taken, for security and support.
- Measurement data: what search engines and AI assistants publicly answer about the businesses you track.
3. Our instructions
We process your data only on your instructions and for the purposes above. We do not sell it, we do not use it to train models, and we do not use it to market to your contacts.
4. Subprocessors
We use a small number of vendors to deliver the service. The current list — with purpose, location and transfer mechanism — is on the Subprocessors page. We tell you before we bring in a new one.
5. Where your data lives
The platform database and files are held in the European Union. Some vendors process data outside the EU; for those transfers we rely on the European Commission's standard contractual clauses or on an adequacy decision, as noted in the subprocessor list.
6. Security
Access is limited to those who need it, traffic is encrypted, passwords and sensitive keys are stored encrypted, and customer workspaces are separated from one another in the database. If a breach affects you, we tell you without undue delay.
7. Retention and return
Your data stays available for as long as your account runs. After termination you can request an export; we then delete it within a reasonable period, except what we are legally required to keep (such as billing records).
8. Data subject rights
If you receive a request from a data subject, we help you answer it. To have your own data deleted, use our deletion page.