Legal
Data Processing Addendum
Last updated: May 4, 2026
This Data Processing Addendum ("DPA") applies when IssueClear processes personal data in customer project content as a processor, service provider, or equivalent role on behalf of a business customer. It forms part of the Terms unless the parties have signed a separate data processing agreement.
1. Roles
The customer is the controller or business for personal data it submits to project content. YY Digital is the processor or service provider for that personal data. YY Digital remains a controller for account administration, billing administration, security, product analytics, and compliance data described in the Privacy Policy.
2. Processing details
Subject matter: providing the IssueClear Service. Duration: the term of the customer's use of the Service plus lawful retention periods. Nature and purpose: hosting, storing, displaying, transmitting, securing, backing up, deleting, exporting, and supporting project content. Data subjects: customer users, clients, collaborators, invitees, and people referenced in project content. Data types: contact details, account identifiers, project content, comments, attachments, approvals, activity metadata, and related operational data.
3. Customer instructions
We will process customer personal data only to provide, secure, support, and improve the Service; to comply with documented customer instructions; and as required by law. The Terms, this DPA, product settings, and customer use of the Service are the customer's instructions.
4. Security
We will maintain reasonable technical and organizational measures designed to protect customer personal data against unauthorized access, loss, misuse, alteration, and disclosure. Current measures are summarized in the Security Overview.
5. Subprocessors
Customer authorizes IssueClear to use subprocessors needed to provide the Service. The current list is available at /subprocessors. We will require subprocessors to protect personal data using appropriate contractual and security commitments.
6. International transfers
Where transfer safeguards are required, the parties will rely on applicable lawful mechanisms, such as adequacy decisions, contractual commitments, standard contractual clauses, or other safeguards recognized by applicable Israeli, EEA, UK, Swiss, California, or other data protection laws.
7. Assistance and deletion
Taking into account the nature of the Service, we will provide reasonable assistance with data subject requests, security incidents, and compliance obligations where required by applicable law and where the customer cannot reasonably address the request through the Service. At account deletion or termination, customer personal data will be deleted from active systems according to the Service deletion workflow, subject to backups, logs, legal retention, billing records, and technical limitations.
8. Contact
DPA questions can be sent to [email protected].