CINXE.COM

<!DOCTYPE html><html style="--top-banner-height:0px" class=""><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=5"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/instagram.07dc14cd.svg"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/whatsapp.742928a4.svg"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/messenger.aac6546b.svg"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/ai.9f66e1b4.svg"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/tiktok.2628dce8.svg"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/find_agency.9a9db1ea.svg"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/affiliate.193aa077.svg"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/save-svg.c526402e.svg"/><link rel="preload" as="image" href="https://mccdn.me/martech/next-lp//_next/static/media/become-partner.fd6c29b3.svg"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/e527e5ae976e5785.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/78d2265c972bd054.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/a0d971e68e58f050.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/be1cee03285d53fa.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/49ccd43e14e84871.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/45ae78229736dcae.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/604359d8fd3b947d.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/1451bafdf9bcdc11.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/f94abfc2af041c2b.css" data-precedence="next"/><link rel="stylesheet" href="https://mccdn.me/martech/next-lp/_next/static/css/e8c8bd90e2037cf8.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="https://mccdn.me/martech/next-lp/_next/static/chunks/webpack-34c4ce02ae79bcf8.js"/><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/1dd3208c-79bcc8848863ece4.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/25c8a87d-dc08773419952dc0.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/7630-b165702ac0f483ce.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/main-app-ea5b98e6162c6d23.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/6037-d8b0132ecf058e58.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/6404-90cf9092b93c58bd.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/9715-a84de278621dfb3a.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/8951-902db517a437cfb4.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/1700-f227dd53c37b6957.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/app/(en)/layout-3083956be3c7c92c.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/app/(en)/legal/%5Bslug%5D/page-ccbc09fb186beb9f.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/891cff7f-fe2567c447b0469b.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/6556-d1062628c3af0273.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/app/layout-8fade966b47c3a52.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/app/error-169d85246f1e6dab.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/app/not-found-9df21fe005aa1e9d.js" async=""></script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/app/global-error-9137abac75965be4.js" async=""></script><script type="text/plain" data-usercentrics="Manychat Analytics" async="" src="https://manychat.com/js/extvisit.js"></script><script async="" id="usercentrics-cmp" src="https://web.cmp.usercentrics.eu/ui/loader.js" data-ruleset-id="Iq840wqtUrxM4w"></script><title>Data Processing Addendum | Manychat</title><meta name="description" content="Learn how to grow your business through marketing tools, tactics, and strategies"/><link rel="manifest" href="/manifest.json" crossorigin="use-credentials"/><meta name="keywords" content="Instagram, Direct Messages, DM, Automation, Facebook, Messenger, Bot, Message, Chat, Marketing, Conversations, SMS"/><meta name="robots" content="index, follow, max-video-preview:-1, max-image-preview:large, max-snippet:-1"/><link rel="canonical" href="https://manychat.com/legal/dpa"/><link rel="alternate" hrefLang="x-default" href="https://manychat.com/legal/dpa"/><link rel="alternate" hrefLang="es" href="https://manychat.com/es/legal/dpa"/><link rel="alternate" hrefLang="pt" href="https://manychat.com/pt/legal/dpa"/><meta property="og:title" content="Data Processing Addendum | Manychat"/><meta property="og:description" content="Learn how to grow your business through marketing tools, tactics, and strategies"/><meta property="og:url" content="https://manychat.com/legal/dpa"/><meta property="og:site_name" content="manychat.com"/><meta property="og:locale" content="en_US"/><meta property="og:image" content="https://mccdn.me/martcdn/next-lp/pages/legal/[slug]/og-image.png"/><meta property="og:image:width" content="1200"/><meta property="og:image:height" content="630"/><meta property="og:image:alt" content="Chat Marketing with Manychat"/><meta property="og:type" content="website"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:title" content="Data Processing Addendum | Manychat"/><meta name="twitter:description" content="Learn how to grow your business through marketing tools, tactics, and strategies"/><meta name="twitter:image" content="https://mccdn.me/martcdn/next-lp/pages/legal/[slug]/og-image.png"/><meta name="twitter:image:alt" content="Chat Marketing with Manychat"/><link rel="icon" href="https://manychat.com/landing-static/favicon.svg" type="image/svg+xml"/><link rel="apple-touch-icon" href="https://manychat.com/landing-static/1024.png"/><link rel="apple-touch-icon" href="https://manychat.com/landing-static/76.png" sizes="76x76"/><link rel="apple-touch-icon" href="https://manychat.com/landing-static/120.png" sizes="120x120"/><link rel="apple-touch-icon" href="https://manychat.com/landing-static/152.png" sizes="152x152"/><link rel="apple-touch-icon" href="https://manychat.com/landing-static/180.png" sizes="180x180"/><link rel="image_src" href="https://mccdn.me/martcdn/next-lp/pages/legal/[slug]/og-image.png"/><link rel="alternative icon" href="https://manychat.com/landing-static/favicon.png" type="image/png"/><link rel="preconnect" href="//app.usercentrics.eu"/><link rel="preconnect" href="//api.usercentrics.eu"/><link rel="preconnect" href="//privacy-proxy.usercentrics.eu"/><link rel="preload" href="//web.cmp.usercentrics.eu/ui/loader.js" as="script"/><link rel="preconnect" href="https://www.google.com"/><link rel="preconnect" href="https://www.gstatic.com" crossorigin=""/><script>if (!window.globalThis) window.globalThis=window</script><script async="" type="text/plain" data-usercentrics="Microsoft Clarity"> (function(c,l,a,r,i,t,y){ c[a]=c[a]||function(){(c[a].q=c[a].q||[]).push(arguments)}; t=l.createElement(r);t.async=1;t.src="https://www.clarity.ms/tag/"+i; y=l.getElementsByTagName(r)[0];y.parentNode.insertBefore(t,y); })(window, document, "clarity", "script", "mbuibzew5z"); </script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><div><div class="page-wrapper " style="scroll-behavior:smooth"><div class="new-top-bar relative TopBar_container__vNu2A "><div class="TopBar_menu__3DutN "><div class="TopBar_menu-inner__mrkWY"><div class="height"><div class="TopBar_menu-container__tjaka flex flex_fdc flex_aic"><a class="p_y-s p_x-l !px-2rem !font-cofo !rounded-[10rem] !py-[1.4rem] !text-[1.4rem]/[2rem] !font-normal !uppercase !tracking-[0.01em] before:!rounded-[10rem] caps b_rd-xl pointer inline-block m_t-m button " link="/signup" label="Get Started" href="https://app.manychat.com/signup"><span class="text_center flex_jcc height flex_aic mx-0.8rem flex"><span class="button__center"><span>Get Started</span><span class="button__before">Get Started</span><span class="button__after">Get Started</span></span></span></a><a href="https://app.manychat.com/signin" target="_blank" rel="noopener noreferrer" class="block p_y-s m_y-xs caps " link="/signin" label="Sign In" itemProp="url"><span class="TopBar_underline-item__H_3_P" itemProp="name">Sign In</span></a><div class="TopBar_menu-item__erINs TopBar_underline__fakyk width"><div class="TopBar_menu-name__K5Fiu TopBar_underline-ov___PJ5a flex flex_jcsb flex_aic caps p_y-s p_l-l p_r-s"><span class="TopBar_underline-item__H_3_P">Product</span><div class="TopBar_menu-arrow__FDMqP arrowhead"></div></div><div class="TopBar_menu-drop__m6Qnb"><div class="TopBar_menu-ov__s2fQD"><div class="TopBar_menu-links-container__BmogN flex flex_fit p_y-m p_x-l"><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex flex_aic m_y-xs " link="/product/instagram" label="Instagram" description="Automate your Instagram Marketing" icon="https://mccdn.me/martech/next-lp//_next/static/media/instagram.07dc14cd.svg" href="/product/instagram"><img class="TopBar_menu-ico__JegnN" src="https://mccdn.me/martech/next-lp//_next/static/media/instagram.07dc14cd.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><span class="TopBar_underline-item__H_3_P m_l-xs">Instagram</span></div></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex flex_aic m_y-xs " link="/product/whatsapp" label="WhatsApp" description="Connect with your Customers Instantly " icon="https://mccdn.me/martech/next-lp//_next/static/media/whatsapp.742928a4.svg" href="/product/whatsapp"><img class="TopBar_menu-ico__JegnN" src="https://mccdn.me/martech/next-lp//_next/static/media/whatsapp.742928a4.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><span class="TopBar_underline-item__H_3_P m_l-xs">WhatsApp</span></div></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex flex_aic m_y-xs " link="/product/messenger-marketing" label="Messenger" description="Facebook Messenger chatbot #1" icon="https://mccdn.me/martech/next-lp//_next/static/media/messenger.aac6546b.svg" href="/product/messenger-marketing"><img class="TopBar_menu-ico__JegnN" src="https://mccdn.me/martech/next-lp//_next/static/media/messenger.aac6546b.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><span class="TopBar_underline-item__H_3_P m_l-xs">Messenger</span></div></a><a href="/product/ai" target="_self" rel="" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex flex_aic m_y-xs " link="https://manychat.com/product/ai" label="Manychat AI" description="A Smarter Way to Chat Automation" icon="https://mccdn.me/martech/next-lp//_next/static/media/ai.9f66e1b4.svg"><img class="TopBar_menu-ico__JegnN" src="https://mccdn.me/martech/next-lp//_next/static/media/ai.9f66e1b4.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><span class="TopBar_underline-item__H_3_P m_l-xs">Manychat AI</span></div></a><a href="https://get.manychat.com/hey-tiktok" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex flex_aic m_y-xs " link="https://get.manychat.com/hey-tiktok" label="TikTok" description="Turn TikTok Views into Profits with Automation." icon="https://mccdn.me/martech/next-lp//_next/static/media/tiktok.2628dce8.svg"><img class="TopBar_menu-ico__JegnN" src="https://mccdn.me/martech/next-lp//_next/static/media/tiktok.2628dce8.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><span class="TopBar_underline-item__H_3_P m_l-xs">TikTok</span></div></a></div></div></div></div><div class="TopBar_menu-item__erINs TopBar_underline__fakyk width"><div class="TopBar_menu-name__K5Fiu TopBar_underline-ov___PJ5a flex flex_jcsb flex_aic caps p_y-s p_l-l p_r-s"><span class="TopBar_underline-item__H_3_P">Solutions</span><div class="TopBar_menu-arrow__FDMqP arrowhead"></div></div><div class="TopBar_menu-drop__m6Qnb"><div class="TopBar_menu-ov__s2fQD"><div class="TopBar_menu-links-list-container__fzjQN"><div class="TopBar_menu-links-list__StquJ flex flex_fit p_y-m p_x-l"><span class="caps m_y-xs p_b-xxxs">by Business Type</span><div class="flex flex_fit"><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs " label="for Creators" link="/creators" href="/creators"><span class="TopBar_underline-item__H_3_P">for Creators</span></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs " label="for eCommerce" link="/meet-chatmarketing-for-ecommerce" href="/meet-chatmarketing-for-ecommerce"><span class="TopBar_underline-item__H_3_P">for eCommerce</span></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs " label="for Agencies" link="/product/for-agencies" href="/product/for-agencies"><span class="TopBar_underline-item__H_3_P">for Agencies</span></a></div></div><div class="TopBar_menu-links-list__StquJ flex flex_fit p_y-m p_x-l"><span class="caps m_y-xs p_b-xxxs">by Use Case</span><div class="flex flex_fit"><a href="https://get.manychat.com/grow" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Grow Your Followers" link="https://get.manychat.com/grow"><span class="TopBar_underline-item__H_3_P">Grow Your Followers</span></a><a href="https://get.manychat.com/use-case/collect-emails" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Collect Emails" link="https://get.manychat.com/use-case/collect-emails"><span class="TopBar_underline-item__H_3_P">Collect Emails</span></a><a href="https://get.manychat.com/use-case/request-to-follow" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Request to Follow" link="https://get.manychat.com/use-case/request-to-follow"><span class="TopBar_underline-item__H_3_P">Request to Follow</span></a><a href="https://get.manychat.com/use-case/comment-to-dm" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Respond to Comments" link="https://get.manychat.com/use-case/comment-to-dm"><span class="TopBar_underline-item__H_3_P">Respond to Comments</span></a><a href="https://get.manychat.com/rip-link-in-bio" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Send Links in DM" link="https://get.manychat.com/rip-link-in-bio"><span class="TopBar_underline-item__H_3_P">Send Links in DM</span></a></div></div></div></div></div></div><div class="TopBar_menu-item__erINs TopBar_underline__fakyk width"><div class="TopBar_menu-name__K5Fiu TopBar_underline-ov___PJ5a flex flex_jcsb flex_aic caps p_y-s p_l-l p_r-s"><span class="TopBar_underline-item__H_3_P">Agencies</span><div class="TopBar_menu-arrow__FDMqP arrowhead"></div></div><div class="TopBar_menu-drop__m6Qnb"><div class="TopBar_menu-ov__s2fQD"><div class="TopBar_menu-links-container__BmogN flex flex_fit p_y-m p_x-l"><a href="https://manychat.com/agency/listing/" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex flex_aic m_y-xs " link="/" label="Hire an Agency" description="Get help from chat marketing experts" icon="https://mccdn.me/martech/next-lp//_next/static/media/find_agency.9a9db1ea.svg"><img class="TopBar_menu-ico__JegnN" src="https://mccdn.me/martech/next-lp//_next/static/media/find_agency.9a9db1ea.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><span class="TopBar_underline-item__H_3_P m_l-xs">Hire an Agency</span></div></a><a href="/affiliate/" target="_blank" rel="" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex flex_aic m_y-xs " link="https://manychat.com/affiliate/" label="Join the Affiliate Program" description="Earn up to 50% recurring commission" icon="https://mccdn.me/martech/next-lp//_next/static/media/affiliate.193aa077.svg"><img class="TopBar_menu-ico__JegnN" src="https://mccdn.me/martech/next-lp//_next/static/media/affiliate.193aa077.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><span class="TopBar_underline-item__H_3_P m_l-xs">Join the Affiliate Program</span></div></a></div></div></div></div><div class="TopBar_menu-item__erINs TopBar_underline__fakyk width"><a class="TopBar_menu-name__K5Fiu TopBar_underline-ov___PJ5a flex flex_jcsb flex_aic caps p_y-s p_l-l p_r-s " link="/pricing" label="Pricing" href="/pricing"><span class="TopBar_underline-item__H_3_P">Pricing</span></a></div><div class="TopBar_menu-item__erINs TopBar_underline__fakyk width"><div class="TopBar_menu-name__K5Fiu TopBar_underline-ov___PJ5a flex flex_jcsb flex_aic caps p_y-s p_l-l p_r-s"><span class="TopBar_underline-item__H_3_P">Resources</span><div class="TopBar_menu-arrow__FDMqP arrowhead"></div></div><div class="TopBar_menu-drop__m6Qnb"><div class="TopBar_menu-ov__s2fQD"><div class="TopBar_menu-links-list-container__fzjQN"><div class="TopBar_menu-links-list__StquJ flex flex_fit p_y-m p_x-l"><span class="caps m_y-xs p_b-xxxs">Learn</span><div class="flex flex_fit"><a href="/blog/" target="_blank" rel="" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Blog" link="https://manychat.com/blog/"><span class="TopBar_underline-item__H_3_P">Blog</span></a><a href="https://help.manychat.com/" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Help Center" link="https://help.manychat.com/"><span class="TopBar_underline-item__H_3_P">Help Center</span></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs " label="How To Guides" link="/resources/how-to" href="/resources/how-to"><span class="TopBar_underline-item__H_3_P">How To Guides</span></a><a href="https://events.manychat.com/" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Webinars" link="/"><span class="TopBar_underline-item__H_3_P">Webinars</span></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs " label="Video Course" link="/resources/video-course" href="/resources/video-course"><span class="TopBar_underline-item__H_3_P">Video Course</span></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs " label="eBooks" link="/resources/ebooks" href="/resources/ebooks"><span class="TopBar_underline-item__H_3_P">eBooks</span></a></div></div><div class="TopBar_menu-links-list__StquJ flex flex_fit p_y-m p_x-l"><span class="caps m_y-xs p_b-xxxs">Get Inspired</span><div class="flex flex_fit"><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs " label="Chatbot Examples" link="/messenger-marketing-examples" href="/messenger-marketing-examples"><span class="TopBar_underline-item__H_3_P">Chatbot Examples</span></a><a href="https://community.manychat.com/" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk m_y-xs" label="Community" link="https://community.manychat.com/"><span class="TopBar_underline-item__H_3_P">Community</span></a></div></div></div></div></div></div></div></div></div></div><div class="width disallow fixed undefined"><div id="top-bar" class="allow TopBar_top-bar__kGlp_ " data-is-sticky="false" data-is-open="false"><div class="p_x-s sm-p_x-m height relative"><div class="width height flex_aic flex_jcsb flex" itemScope="" itemType="http://www.schema.org/SiteNavigationElement"><div class="height flex_aic flex"><div class="relative flex TopBar_logo__tUnzY "><a class="width " href="/"><img src="https://mccdn.me/martech/next-lp//_next/static/media/logo-with-text.274e5e81.svg" class="width block" alt="Manychat logo" loading="lazy"/></a><div class="absolute bg_white flex flex_fdc p_x-m p_y-s o_hidden Popup_container__QKWHn "><a class="caps flex flex_aic pointer Popup_underline__O43ye" href="https://mccdn.me/martcdn/logo.svg" download=""><img class="Popup_ico__wt3Kh" src="https://mccdn.me/martech/next-lp//_next/static/media/save-svg.c526402e.svg" alt="AI ico"/><span class="nowrap text_black">save logo as svg</span></a><a href="https://manychat.com/affiliate/" target="_blank"><div class="caps flex flex_aic pointer Popup_underline__O43ye"><img class="Popup_ico__wt3Kh" src="https://mccdn.me/martech/next-lp//_next/static/media/become-partner.fd6c29b3.svg" alt="AI ico"/><span class="nowrap text_black">become a partner</span></div></a></div></div><div class="m_x-l hover_trigger flex flex_aic pointer"><div class="underline_link LanguageSelect_link__hxfGV "><select class="LanguageSelect_select__XJM9d pointer "><option value="" selected="">En</option><option value="/es">Es</option><option value="/pt">Pt</option></select></div><div class="arrowhead down LanguageSelect_arrow__k4ua6">↓</div></div></div><div id="burger" class="block lg-none Burger_wrap__rP0CB "></div><nav class="TopBar_nav__tshTc width flex_c flex"><div class="TopBar_nav-drop__HPUBm shadow"></div><div class="TopBar_nav-item__6Xz4x TopBar_underline__fakyk p_a-s underline_nav-link"><div class="TopBar_nav-name__EQjCj TopBar_underline-ov___PJ5a caps"><span class="TopBar_underline-item__H_3_P">Product</span></div><div class="width TopBar_nav-ov__mRXGd"><div class="flex_jcc flex TopBar_nav-move__T6k_j"><div class="p_x-s flex TopBar_nav-links-container__ay3_5"><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex_fdc flex-item_shrink m_y-xl m_x-s flex " link="/product/instagram" label="Instagram" description="Automate your Instagram Marketing" icon="https://mccdn.me/martech/next-lp//_next/static/media/instagram.07dc14cd.svg" itemProp="url" href="/product/instagram"><img class="TopBar_nav-ico__lYeT_ m_b-l" src="https://mccdn.me/martech/next-lp//_next/static/media/instagram.07dc14cd.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><p class="TopBar_underline-item__H_3_P" itemProp="name">Instagram</p></div><div class="small text_grey m_t-xxs">Automate your Instagram Marketing</div></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex_fdc flex-item_shrink m_y-xl m_x-s flex " link="/product/whatsapp" label="WhatsApp" description="Connect with your Customers Instantly " icon="https://mccdn.me/martech/next-lp//_next/static/media/whatsapp.742928a4.svg" itemProp="url" href="/product/whatsapp"><img class="TopBar_nav-ico__lYeT_ m_b-l" src="https://mccdn.me/martech/next-lp//_next/static/media/whatsapp.742928a4.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><p class="TopBar_underline-item__H_3_P" itemProp="name">WhatsApp</p></div><div class="small text_grey m_t-xxs">Connect with your Customers Instantly </div></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex_fdc flex-item_shrink m_y-xl m_x-s flex " link="/product/messenger-marketing" label="Messenger" description="Facebook Messenger chatbot #1" icon="https://mccdn.me/martech/next-lp//_next/static/media/messenger.aac6546b.svg" itemProp="url" href="/product/messenger-marketing"><img class="TopBar_nav-ico__lYeT_ m_b-l" src="https://mccdn.me/martech/next-lp//_next/static/media/messenger.aac6546b.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><p class="TopBar_underline-item__H_3_P" itemProp="name">Messenger</p></div><div class="small text_grey m_t-xxs">Facebook Messenger chatbot #1</div></a><a href="/product/ai" target="_self" rel="" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex_fdc flex-item_shrink m_y-xl m_x-s flex " link="https://manychat.com/product/ai" label="Manychat AI" description="A Smarter Way to Chat Automation" icon="https://mccdn.me/martech/next-lp//_next/static/media/ai.9f66e1b4.svg" itemProp="url"><img class="TopBar_nav-ico__lYeT_ m_b-l" src="https://mccdn.me/martech/next-lp//_next/static/media/ai.9f66e1b4.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><p class="TopBar_underline-item__H_3_P" itemProp="name">Manychat AI</p></div><div class="small text_grey m_t-xxs">A Smarter Way to Chat Automation</div></a><a href="https://get.manychat.com/hey-tiktok" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex_fdc flex-item_shrink m_y-xl m_x-s flex " link="https://get.manychat.com/hey-tiktok" label="TikTok" description="Turn TikTok Views into Profits with Automation." icon="https://mccdn.me/martech/next-lp//_next/static/media/tiktok.2628dce8.svg" itemProp="url"><img class="TopBar_nav-ico__lYeT_ m_b-l" src="https://mccdn.me/martech/next-lp//_next/static/media/tiktok.2628dce8.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><p class="TopBar_underline-item__H_3_P" itemProp="name">TikTok</p></div><div class="small text_grey m_t-xxs">Turn TikTok Views into Profits with Automation.</div></a></div></div></div></div><div class="TopBar_nav-item__6Xz4x TopBar_underline__fakyk p_a-s underline_nav-link"><div class="TopBar_nav-name__EQjCj TopBar_underline-ov___PJ5a caps"><span class="TopBar_underline-item__H_3_P">Solutions</span></div><div class="width TopBar_nav-ov__mRXGd"><div class="flex_jcc flex TopBar_nav-move__T6k_j"><div class="flex TopBar_nav-links-list-container__J9_98"><div class="flex_fit p_y-xl flex TopBar_nav-links-list__wK2Lk"><div class="TopBar_nav-name__EQjCj caps m_b-xxxs">by Business Type</div><div class="flex_fit p_t-xs flex"><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs " label="for Creators" link="/creators" itemProp="url" href="/creators"><p class="TopBar_underline-item__H_3_P" itemProp="name">for Creators</p></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs " label="for eCommerce" link="/meet-chatmarketing-for-ecommerce" itemProp="url" href="/meet-chatmarketing-for-ecommerce"><p class="TopBar_underline-item__H_3_P" itemProp="name">for eCommerce</p></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs " label="for Agencies" link="/product/for-agencies" itemProp="url" href="/product/for-agencies"><p class="TopBar_underline-item__H_3_P" itemProp="name">for Agencies</p></a></div></div><div class="flex_fit p_y-xl flex TopBar_nav-links-list__wK2Lk"><div class="TopBar_nav-name__EQjCj caps m_b-xxxs">by Use Case</div><div class="flex_fit p_t-xs flex"><a href="https://get.manychat.com/grow" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Grow Your Followers" link="https://get.manychat.com/grow" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Grow Your Followers</p></a><a href="https://get.manychat.com/use-case/collect-emails" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Collect Emails" link="https://get.manychat.com/use-case/collect-emails" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Collect Emails</p></a><a href="https://get.manychat.com/use-case/request-to-follow" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Request to Follow" link="https://get.manychat.com/use-case/request-to-follow" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Request to Follow</p></a><a href="https://get.manychat.com/use-case/comment-to-dm" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Respond to Comments" link="https://get.manychat.com/use-case/comment-to-dm" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Respond to Comments</p></a><a href="https://get.manychat.com/rip-link-in-bio" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Send Links in DM" link="https://get.manychat.com/rip-link-in-bio" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Send Links in DM</p></a></div></div></div></div></div></div><div class="TopBar_nav-item__6Xz4x TopBar_underline__fakyk p_a-s underline_nav-link"><div class="TopBar_nav-name__EQjCj TopBar_underline-ov___PJ5a caps"><span class="TopBar_underline-item__H_3_P">Agencies</span></div><div class="width TopBar_nav-ov__mRXGd"><div class="flex_jcc flex TopBar_nav-move__T6k_j"><div class="p_x-s flex TopBar_nav-links-container__ay3_5"><a href="https://manychat.com/agency/listing/" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex_fdc flex-item_shrink m_y-xl m_x-s flex " link="/" label="Hire an Agency" description="Get help from chat marketing experts" icon="https://mccdn.me/martech/next-lp//_next/static/media/find_agency.9a9db1ea.svg" itemProp="url"><img class="TopBar_nav-ico__lYeT_ m_b-l" src="https://mccdn.me/martech/next-lp//_next/static/media/find_agency.9a9db1ea.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><p class="TopBar_underline-item__H_3_P" itemProp="name">Hire an Agency</p></div><div class="small text_grey m_t-xxs">Get help from chat marketing experts</div></a><a href="/affiliate/" target="_blank" rel="" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk flex_fdc flex-item_shrink m_y-xl m_x-s flex " link="https://manychat.com/affiliate/" label="Join the Affiliate Program" description="Earn up to 50% recurring commission" icon="https://mccdn.me/martech/next-lp//_next/static/media/affiliate.193aa077.svg" itemProp="url"><img class="TopBar_nav-ico__lYeT_ m_b-l" src="https://mccdn.me/martech/next-lp//_next/static/media/affiliate.193aa077.svg" alt=""/><div class="TopBar_underline-ov___PJ5a"><p class="TopBar_underline-item__H_3_P" itemProp="name">Join the Affiliate Program</p></div><div class="small text_grey m_t-xxs">Earn up to 50% recurring commission</div></a></div></div></div></div><div class="TopBar_nav-item__6Xz4x TopBar_underline__fakyk p_a-s underline_nav-link"><a class="TopBar_nav-name__EQjCj TopBar_underline-ov___PJ5a caps " link="/pricing" label="Pricing" href="/pricing"><span class="TopBar_underline-item__H_3_P">Pricing</span></a></div><div class="TopBar_nav-item__6Xz4x TopBar_underline__fakyk p_a-s underline_nav-link"><div class="TopBar_nav-name__EQjCj TopBar_underline-ov___PJ5a caps"><span class="TopBar_underline-item__H_3_P">Resources</span></div><div class="width TopBar_nav-ov__mRXGd"><div class="flex_jcc flex TopBar_nav-move__T6k_j"><div class="flex TopBar_nav-links-list-container__J9_98"><div class="flex_fit p_y-xl flex TopBar_nav-links-list__wK2Lk"><div class="TopBar_nav-name__EQjCj caps m_b-xxxs">Learn</div><div class="flex_fit p_t-xs flex"><a href="/blog/" target="_blank" rel="" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Blog" link="https://manychat.com/blog/" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Blog</p></a><a href="https://help.manychat.com/" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Help Center" link="https://help.manychat.com/" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Help Center</p></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs " label="How To Guides" link="/resources/how-to" itemProp="url" href="/resources/how-to"><p class="TopBar_underline-item__H_3_P" itemProp="name">How To Guides</p></a><a href="https://events.manychat.com/" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Webinars" link="/" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Webinars</p></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs " label="Video Course" link="/resources/video-course" itemProp="url" href="/resources/video-course"><p class="TopBar_underline-item__H_3_P" itemProp="name">Video Course</p></a><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs " label="eBooks" link="/resources/ebooks" itemProp="url" href="/resources/ebooks"><p class="TopBar_underline-item__H_3_P" itemProp="name">eBooks</p></a></div></div><div class="flex_fit p_y-xl flex TopBar_nav-links-list__wK2Lk"><div class="TopBar_nav-name__EQjCj caps m_b-xxxs">Get Inspired</div><div class="flex_fit p_t-xs flex"><a class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs " label="Chatbot Examples" link="/messenger-marketing-examples" itemProp="url" href="/messenger-marketing-examples"><p class="TopBar_underline-item__H_3_P" itemProp="name">Chatbot Examples</p></a><a href="https://community.manychat.com/" target="_blank" rel="noopener noreferrer" class="TopBar_nav-link__Va9Kb TopBar_underline__fakyk p_y-xs" label="Community" link="https://community.manychat.com/" itemProp="url"><p class="TopBar_underline-item__H_3_P" itemProp="name">Community</p></a></div></div></div></div></div></div></nav><div class="TopBar_top-bar-right__nGUBL height flex_aic flex"><a class="p_y-s p_x-l !px-2rem !font-cofo !rounded-[10rem] !py-[1.4rem] !text-[1.4rem]/[2rem] !font-normal !uppercase !tracking-[0.01em] before:!rounded-[10rem] caps b_rd-xl pointer inline-block button_outlined-cobalt TopBar_signup__fjzBV button button_outlined " link="/signup" label="Get Started" href="https://app.manychat.com/signup"><span class="text_center flex_jcc height flex_aic mx-0.8rem flex"><span class="button__center"><span>Get Started</span><span class="button__before">Get Started</span><span class="button__after">Get Started</span></span></span></a><a href="https://app.manychat.com/signin" target="_blank" rel="noopener noreferrer" class="TopBar_underline__fakyk caps p_y-s m_l-m " link="/signin" label="Sign In" itemProp="url"><span class="TopBar_underline-item__H_3_P" itemProp="name">Sign In</span></a></div></div></div></div></div></div><main class="main"><section class="w w_l grid grid_1-2 grid_gap m_t-xl m_b-xxl"><aside><div class="b_a sm-b_none sm-bg_grey sm-m_r-m SubMenu_submenu__hzZwi "><div class="flex flex_jcsb flex_aic p_a-s pointer SubMenu_trigger__Njwid">More documents<div class="arrowhead "></div></div><div class="flex_fdc p_a-s sm-p_x-m SubMenu_items__pV_jE"><a class="relative hover_trigger p_y-xs " href="/legal/tos"><span class="underline_link">Terms of Service</span></a><a class="relative hover_trigger p_y-xs active undefined" href="/legal/dpa"><span class="underline_link">Data Processing Addendum</span></a><a class="relative hover_trigger p_y-xs " href="/legal/privacy"><span class="underline_link">Privacy Policy</span></a><a class="relative hover_trigger p_y-xs " href="/legal/candidate-privacy-statement"><span class="underline_link">Candidate Privacy Statement</span></a><a class="relative hover_trigger p_y-xs " href="/legal/service-providers"><span class="underline_link">Service Providers</span></a><a class="relative hover_trigger p_y-xs " href="/legal/cookies-statement"><span class="underline_link">Cookies Statement</span></a><a class="relative hover_trigger p_y-xs " href="/legal/service-level-agreement"><span class="underline_link">Service Level Agreement</span></a><a class="relative hover_trigger p_y-xs " href="/legal/ai-tos"><span class="underline_link">AI Supplementary Terms</span></a></div></div></aside><article style="overflow-x:auto"><div class="flex flex_jcsb flex_fww p_y-s sm-p_t-0 caps"><div class="m_r-s">Effective date: September 16, 2024</div><a href="/legal/dpa-01052023" class="underline_link">Previous Version</a></div><hr class="m_b-s sm-m_b-xl "/><div class="rich_text"><h2 id="data-processing-addendum" tabindex="-1">Data Processing Addendum</h2> <p>In the course of providing Manychat services, Manychat processes certain personal data related to сustomers, their representatives, end users and customer’s subscribers. While doing so, Manychat acts as a processor on behalf of a сustomer and as a controller. This Data Processing Addendum (“<strong>DPA</strong>”) sets forth terms and conditions of such processing by Manychat.</p> <p>The DPA forms an integral part of the <a href="https://manychat.com/legal/tos">Terms of Service</a> (“<strong>Agreement</strong>”) entered into by and between Manychat, Inc., its subsidiaries or affiliates, as applicable (“<strong>Manychat</strong>”) and the customer, being the party to the Agreement (“<strong>Customer</strong>”).</p> <h4 id="table-of-contents" tabindex="-1">Table of Contents</h4> <p><strong><a href="#data-processing-addendum">1. Data Processing Addendum</a></strong></p> <p><a href="#1.-definitions">1.1. Definitions</a></p> <p><a href="#2.-relationships-of-the-parties">1.2. Relationships of the Parties</a></p> <p><a href="#3.-sub-processing">1.3. Sub-processing</a></p> <p><a href="#4.-security-measures">1.4. Security Measures</a></p> <p><a href="#5.-security-reviews-and-reports">1.5. Security Reviews and Reports</a></p> <p><a href="#6.-data-breach-and-notification">1.6. Data Breach and Notification</a></p> <p><a href="#7.-data-subject-rights-and-cooperation">1.7. Data Subject Rights and Cooperation</a></p> <p><a href="#8.-return-or-deletion-of-data">1.8. Return or Deletion of Data</a></p> <p><a href="#9.-miscellaneous">1.9. Miscellaneous</a></p> <p><strong><a href="#annex-1.-details-of-processing">ANNEX 1. Details of Processing</a></strong></p> <p><a href="#1a.-manychat-as-a-processor">1A. Manychat as a Processor</a></p> <p><a href="#1b.-manychat-as-a-controller">1B. Manychat as a Controller</a></p> <p><strong><a href="#annex-2.-security-measures">ANNEX 2. Security Measures</a></strong></p> <p><strong><a href="#annex-3.-international-provisions-and-jurisdiction-specific-terms">ANNEX 3. International Provisions and Jurisdiction Specific Terms</a></strong></p> <h3 id="1.-definitions" tabindex="-1">1. Definitions</h3> <p>“<strong>Applicable</strong> <strong>Data Protection Laws</strong>” means all privacy and data protection laws and regulations applicable to either party under the Agreement. Every party determines on its own its Applicable Data Protection Laws and understands that for Manychat and Customer Applicable Data Protection Laws may be different.</p> <p>"<strong>Controller</strong>” means a person or legal entity that determines the purposes and means of the Personal Data Processing.</p> <p>“<strong>Customer</strong>” means Party to the Agreement with Manychat. Customer may be a client, marketing agency, individual, individual entrepreneur or legal entity on behalf of which End Users use the Service.</p> <p>“<strong>Customer Account Data</strong>” means Personal Data related to Customer, its representatives and End Users which Manychat processes as a separate Controller as more particularly described in this DPA.</p> <p>“<strong>Customer Content</strong>” means Personal Data related to End Users and Customer’s Subscribers which Manychat processes on behalf of Customer as a Processor in the course of providing the Service, as more particularly described in this DPA.</p> <p>“<strong>Customer’s Subscribers</strong>” Data Subjects with whom Customer communicates with use of the Service and(or) whose data is uploaded to the Service by Customer (customers, prospective customers, social media and messaging platform contacts or other individuals).</p> <p>“<strong>Data Breach</strong>” means any confirmed unauthorized or unlawful breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to Personal Data being Processed by Manychat. Data Breach does not include unsuccessful attempts or activities that do not compromise the security of Personal Data, including unsuccessful log-in attempts, pings, port scans, denial of service attacks or other network attacks on firewalls or networked systems.</p> <p>“<strong>Data Privacy Frameworks</strong>” means the EU-U.S Data Privacy Framework (“EU-U.S. DPF”), the Swiss-U.S. Data Privacy Framework (“Swiss DPF”), and the UK Extension to the EU-U.S. DPF (“UK Extension”) as administered by the U.S. Department of Commerce.</p> <p>“<strong>Data Subject</strong>” means an identified or identifiable natural person to whom Personal Data relates.</p> <p>“<strong>End Users</strong>” means Customer and other Data Subjects with lawful access to the Service on behalf of or under a lawful authorization of Customer.</p> <p>“<strong>Personal Data</strong>” means “personal data”, “personal information”, “personally identifiable information” or similar information defined in and governed by Applicable Data Protection Laws and means any information relating to Data Subject. Under this DPA, Personal Data covers Customer Content and Customer Account Data. If the term Personal Data is used, then such provisions apply to both Customer Content and Customer Account Data.</p> <p>“<strong>Processing</strong>” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.</p> <p>“<strong>Processor</strong>” means an entity that processes Personal Data on behalf of a Controller.</p> <p>“<strong>Service</strong>” means any product or service provided by Manychat to Customer pursuant to the Agreement.</p> <p>“<strong>Standard Contractual Clauses</strong>” means (i) where the GDPR applies, the standard contractual clauses annexed to the European Commission's Implementing Decision 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the European Council (available as of June 2021 <a href="https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj">https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj</a>), (the “EU SCCs”); (ii) where the UK GDPR applies, the applicable standard data protection clauses adopted pursuant to Article 46(2)(c) or (d) of the UK GDPR including the standard data protection clauses issued by the commissioner under s119A(1) of the UK DPA 2018 as revised from time to time (“UK Addendum”); and (iii) where the Swiss DPA applies, the applicable standard data protection clauses issued, approved or recognized by the Swiss Federal Data Protection and Information Commissioner (the “Swiss SCCs”), in each case as completed as described in Annex 3 (International Provisions and Jurisdiction Specific Terms) below.</p> <p>“<strong>Sub-processor</strong>” means any Processor engaged by Manychat to assist in fulfilling its obligations with respect to providing the Service pursuant to the Agreement or this DPA.</p> <p>All capitalized terms not defined in this DPA shall have the meanings set forth in the Agreement.</p> <h3 id="2.-relationships-of-the-parties" tabindex="-1">2. Relationships of the Parties</h3> <p>2.1. <strong>Manychat as a Processor.</strong> The parties acknowledge and agree that with regard to the Processing of Customer Content, Manychat is a Processor acting on behalf of Customer (whether itself a Controller or a Processor). Manychat Processes Customer Content in accordance with Customer’s instructions as set forth in Section 2.4. Manychat shall Process Customer Content only for the purposes described in this DPA and only in accordance with Customer’s instructions.</p> <p>2.2. <strong>Manychat as a Controller.</strong> The parties acknowledge that, with regard to the Processing of Customer Account Data, Manychat is an independent controller, not a joint controller with Customer. Manychat will Process Customer Account Data as a Controller in order to carry out the necessary functions, such as entering into the agreement, account management, compliance with law, accounting, tax, billing, audit, sales and marketing communication with Customer. Manychat will Process such data in accordance with its Privacy Policy, which can be found at <a href="https://manychat.com/legal/privacy">www.manychat.com/legal/privacy</a>, and with applicable provisions of this DPA.</p> <p>2.3. <strong>Details of Data Processing.</strong> Details of Processing Customer Content and Customer Account Data are set in <a href="#annex-1.-details-of-processing">Annex 1</a>. It further specifies the nature and purpose of the Processing, the duration of the Processing, the types of personal data and categories of data subjects, sources of Personal Data, Processors and Sub-processors engaged by Manychat.</p> <p>2.4. <strong>Customer Instructions.</strong> Manychat will Process Customer Content only in accordance with Customer’s instructions. By entering into the Agreement, including this DPA, Customer instructs Manychat to Process Customer Content in order to provide the Service.</p> <p>2.5. <strong>Customer as a Processor.</strong> If Customer is a processor on behalf of some other Controller, Customer warrants on an ongoing basis that the relevant Controller has authorized (i) the instructions described in DPA and the appointment of Manychat as a sub-processor and (ii) Manychat’s engagement of Sub-processors as described in <a href="#3.-sub-processing">Section 3</a>. Customer will immediately forward to the relevant Controller any notice provided by Manychat under this DPA to Customer (on the engagement of a new Sub-processor, Data Breach, request of data subjects, etc.).</p> <p>2.6. <strong>Compliance with Law.</strong> Each party will comply with its obligations under its Applicable Data Protection Laws with respect to its Processing of Personal Data.</p> <p>2.7. <strong>Customer’s Obligations.</strong> Customer agrees that it shall comply with its obligations under Customer’s Applicable Data Protection Laws with respect to its Processing of Personal Data and any processing instructions it issues to Manychat. In particular, Customer must provide notice and obtain all consents (or other legal grounds) and rights necessary under Customer’s Applicable Data Protection Laws for (i) engaging Manychat to Process Customer Content on behalf of Customer and (ii) transfer of Customer Account Data to Manychat pursuant to the Agreement and this DPA.</p> <p>Customer must inform Manychat about any requirements to Processing Customer Content by Manychat which are set under the Customer’s Applicable Data Protection Laws and are not covered directly by this DPA.</p> <h3 id="3.-sub-processing" tabindex="-1">3. Sub-processing</h3> <p>3.1. <strong>Authorized Sub-processors</strong>. Customer specifically authorizes and agrees that Manychat may engage Sub-processors to Process Customer Content. The Sub-processors currently engaged by Manychat and authorized by Customer are available at <a href="https://manychat.com/legal/service-providers">www.manychat.com/legal/service-providers</a>. Customer also generally authorizes Manychat to engage new Sub-processors to Process Customer Content subject to procedure set in Section 3.3 of DPA.</p> <p>3.2. <strong>Sub-processor Obligations</strong>. With respect to all Sub-processors Manychat shall:</p> <ul> <li>enter into a legally binding agreement with the Sub-processor, imposing data protection obligations substantially similar to those set out in this DPA; and</li> <li>remain responsible for the Sub-processor’s compliance with the obligations of this DPA and for any acts or omissions of the Sub-processor that cause Manychat to breach any of its obligations under this DPA.</li> </ul>  <p>3.4. <strong>Engagement of New Sub-processors.</strong> Manychat will notify Customer about the engagement of any new Sub-processor, if Customer subscribes to receive such updates at <a href="https://manychat.com/legal/subscribe-subprocessor-updates">www.manychat.com/legal/subscribe-subprocessor-updates</a>. Manychat will send such notice at least ten (10) calendar days before the new Sub-processor accesses Customer Content. If Manychat reasonably believes that engaging a new Sub-processor and providing access to Customer Content on an expedited basis is necessary to protect the confidentiality, integrity or availability of the Customer Content or avoid material disruption to the Service, Manychat will give such notice as soon as reasonably practicable.</p> <p>3.4. <strong>Objection</strong>. If, within five (5) calendar days after receipt of notice from Manychat, Customer notifies Manychat that Customer objects to Manychat’s appointment of a new Sub-processor based on reasonable data protection concerns, the parties will discuss such concerns in good faith and whether they can be resolved. If the parties are not able to mutually agree to a resolution of such concerns, Customer, as its sole and exclusive remedy, may terminate the Agreement and DPA for convenience with no refunds and Customer will remain liable to pay any committed fees in an order form, order, statement of work or other similar ordering documents.</p> <p>If Customer does not notify Manychat of objections, within the specified period, Manychat is deemed authorized to engage a new Sub-processor by Customer.</p> <h3 id="4.-security-measures" tabindex="-1">4. Security Measures</h3> <p>4.1. <strong>Adequate Measures.</strong> Manychat will implement and maintain throughout the term of this DPA technical and organizational security measures set forth in <a href="#annex-2.-security-measures">Annex 2</a> (“<strong>Security Measures</strong>”) to protect Personal Data from Data Breach and to preserve the security and confidentiality of the Personal Data, in accordance with Manychat’s security standards.</p> <p>4.2. <strong>Confidentiality of Processing</strong>. Manychat shall ensure that any person who is authorized by Manychat to Process Personal Data (including its staff, agents, subcontractors and Sub-processors) shall be under an appropriate obligation of confidentiality (whether a contractual or statutory duty).</p> <p>4.3. <strong>Customer Responsibilities.</strong> Customer acknowledges and agrees that:</p> <ul> <li>it has reviewed and assessed the list of Security Measures and deems it appropriate for the protection of Personal Data under Customer’s Applicable Data Protection Laws and provides appropriate safeguards for cross-border transfer of Personal Data, if applicable. Upon a Customer request, Manychat may implement additional measures or safeguards that may be reasonably required to enable the lawful transfer of Personal Data.</li> <li>except as provided by this DPA, Customer is responsible for its secure use of the Service, including securing its account authentication credentials and protecting the security of Personal Data when in transit, securing Customer’s systems and devices that it uses for accessing the Service.</li> </ul>  <p>4.4. <strong>Updates to Security Measures</strong>. Customer acknowledges that the Security Measures are subject to technical progress and development and that Manychat may update or modify the Security Measures from time to time, provided that such updates and modifications do not result in the degradation of the overall security of the Service purchased by the Customer. Customer is responsible for reviewing the information made available by Manychat relating to updated data security and making an independent determination as to whether the Service meets Customer’s requirements and legal obligations under Customer’s Applicable Data Protection Laws.</p> <h3 id="5.-security-reviews-and-reports" tabindex="-1">5. Security Reviews and Reports</h3> <p>5.1. <strong>Security Reports.</strong> Manychat uses external auditors to verify the adequacy of its security measures and obtained ISO 27001 certification for the Service. Such audits are performed at least annually by independent third-party security professionals at Manychat’s selection and result in the generation of a confidential audit report (“<strong>Audit Report</strong>”). Upon written request, and subject to reasonable confidentiality controls, Manychat will make available to Customer a summary copy of Manychat’s most recent Audit Report.</p> <p>5.2. <strong>Security Due Diligence</strong>. In addition to the Audit Report, Manychat will respond to reasonable requests for information sent by Customer to confirm Manychat’s compliance with this DPA, including responses to Customer’s information security and due diligence questionnaires. Customer shall not exercise this right more than once per calendar year.</p> <h3 id="6.-data-breach-and-notification" tabindex="-1">6. Data Breach and Notification</h3> <p>6.1. <strong>Notification Timeframe.</strong> Upon becoming aware of a confirmed Data Breach, Manychat will notify Customer without undue delay and in no event later than 52 hours after the discovery of such incident unless prohibited by applicable law. A delay in giving such notice requested by law enforcement and/or in light of Manychat’s legitimate needs to investigate or remediate the matter before providing notice will not constitute an undue delay.</p> <p>6.2. <strong>Content of Notification.</strong> Such notices will describe, to the extent possible, details of the Data Breach, including steps taken to mitigate the potential risks and steps Manychat recommends Customer take to address the Data Breach.</p> <p>6.3. <strong>Cooperation by Manychat.</strong> Manychat shall cooperate with Customer and take such reasonable commercial steps to assist in the investigation, mitigation and remediation of each such Data Breach. Manychat’s notification of or response to a Data Breach under this section will not be construed as an acknowledgment by Manychat of any fault or liability with respect to the Data Breach.</p> <p>6.4. <strong>Data Breach Notification to Authorities and Data Subjects.</strong> Customer is solely responsible for fulfilling any third-party notification obligations related to any Data Breach under the Customer’s Applicable Data Protection Laws (e.g. notification to data protection authorities or communication to Data Subjects).</p> <h3 id="7.-data-subject-rights-and-cooperation" tabindex="-1">7. Data Subject Rights and Cooperation</h3> <p>7.1. <strong>Data Subjects Requests.</strong> Manychat will upon Customer’s request provide Customer with the assistance that may be reasonably required by Customer to comply with its obligations under Customer’s Applicable Data Protection Laws to respond to Data Subjects’ requests to exercise their rights under Customer’s Applicable Data Protection Laws (e.g., rights of data access, rectification, erasure, restriction, portability and objection), in cases where Customer cannot reasonably fulfill such requests independently by using the self-service functionality of the Service.</p> <p>7.2. <strong>Authorization for Direct Requests to Manychat.</strong> If Manychat receives a request from a Data Subject in relation to Customer Content, (i) for unsubscription of the Data Subject from messages sent by Customer through the Service or (ii) for deletion of Customer Content in the Service with respect to the Data Subject in part or entirely, Customer authorizes and instructs Manychat to unsubscribe or delete Content Data related to such Data Subject.</p> <p>7.3. <strong>Assistance by Manychat.</strong> Manychat will provide Customer with reasonable assistance specifically requested by Customer to comply with its obligations under Customer’s Applicable Data Protection Laws, taking into account the nature of processing and the information available to Manychat as a Processor (e.g. with respect to the security of Processing, notification of Data Breach, data protection impact assessment, prior consultations with supervisory authorities). If such reasonable assistance requires Manychat to assign significant resources to that effort, it will be provided at a Customer’s expense.</p> <h3 id="8.-return-or-deletion-of-data" tabindex="-1">8. Return or Deletion of Data</h3> <p>8.1. Upon receipt of a request by Customer and following the termination of the Agreement, Manychat must delete or return to Customer all Customer Content from Manychat’s systems. Notwithstanding the foregoing, Customer understands that Manychat may have to retain some parts of Customer Content if required by law according to its data retention policies and such data will remain subject to the requirements of this DPA.</p> <h3 id="9.-miscellaneous" tabindex="-1">9. Miscellaneous</h3> <p>9.1. <strong>Processing in the United States.</strong> Customer acknowledges that provision of the Service and related Manychat’s activities as a Controller may also require processing of Personal Data by Sub-processors or Processors in countries outside the EEA and, including in the United States.</p> <p>9.2. <strong>Way of Communication.</strong> Manychat shall send all notifications mentioned in DPA via email provided by Customer during the sign-up process or post them in the user interface of the Service. All objections and requests by Customer mentioned in DPA or other communication related to Processing of Personal Data must be sent by Customer to the same email from which Customer received a Manychat’s notification or to <a href="mailto:privacy@manychat.com">privacy@manychat.com</a>.</p> <p>9.3. <strong>Claims.</strong> Any claims brought under or in connection with this DPA shall be subject to the terms and conditions, including but not limited to the exclusions and limitations, set forth in the Agreement.</p> <p>9.4. <strong>No Third-party Beneficiary Rights.</strong> This DPA does not confer any third-party beneficiary rights, it is intended for the benefit of the parties hereto and their respective permitted successors and assigns only, and is not for the benefit of, nor may any provision hereof be enforced by, any other person.</p> <p>9.5. <strong>Governing Law.</strong> This DPA will be governed by and construed in accordance with governing law and jurisdiction provisions in the Agreement, unless required otherwise by Customer’s Applicable Data Protection Laws or set in Jurisdiction Specific Terms under <a href="#annex-3.-international-provisions-and-jurisdiction-specific-terms">Annex 3</a>.</p> <p>9.6. <strong>Termination.</strong> This Addendum will automatically terminate upon expiration or termination of the Agreement. Termination of DPA is only possible subject to termination of the Agreement.</p> <p>9.7. <strong>Liability.</strong> Customer further agrees that any regulatory penalties incurred by Manychat in relation to the Personal Data that arise as a result of, or in connection with, Customer’s failure to comply with its obligations under this DPA or any Customer’s Applicable Data Protection Laws shall count toward and reduce Manychat’s liability under the Agreement as if it were a liability to the Customer under the Agreement. Manychat is liable for any regulatory penalties incurred by Customer or Manychat in relation to the Personal Data that arise as a result of, or in connection with, Manychat’s failure to comply with its obligations under this DPA or Manychat’s Applicable Data Protection Laws.</p> <p>Notwithstanding anything to the contrary in this DPA or in the Agreement (including, without limitation, either party’s indemnification obligations), neither party will be responsible for any fines issued or levied against the other party by a regulatory authority or governmental body in connection with such other party’s violation of its Applicable Data Protection Laws.</p> <p>9.8. <strong>Relationship with the Agreement</strong>. This DPA forms an integral part of the Agreement and except as expressly set forth in this DPA, the Agreement remains unchanged and in full force and effect. If there is any conflict between this DPA and the Agreement, this DPA will govern. The parties agree that this DPA shall replace any existing DPA the parties may have previously entered into in connection with the Service.</p> <h2 id="annex-1.-details-of-processing" tabindex="-1">ANNEX 1. Details of Processing</h2> <h3 id="1a.-manychat-as-a-processor" tabindex="-1">1A. Manychat as a Processor</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Purpose and nature of Processing</strong></td> <td>Provision of the Service under the Agreement, including provision of support to the Customer, communicating regarding Customer Account (sending announcements, technical notices, updates, security alerts, and support and administrative messages) and responding to Service-related requests, questions and feedback, logging of activities, errors and incidents tracking, bugs and errors fixing, ensuring the accessibility, security and usability of the Service and its improvement in the interest of Customer.</td> </tr> <tr> <td><strong>Period for which the personal data will be retained</strong></td> <td>Until the termination or expiration of the Agreement in accordance with its terms.</td> </tr> <tr> <td><strong>Categories of data subjects</strong></td> <td>- End Users<br />- Customer’s Subscribers</td> </tr> <tr> <td><strong>Categories of personal data</strong></td> <td>End Users: identification information (name, email), publicly available social media profile information, linked pages and accounts, IT information (IP addresses, geographic location, usage data, cookies data, browser data), financial information (credit card details, account details, payment information).<br />Customer’s Subscribers:<br />- identification information, publicly available social media profile information (photo, name, date of birth, gender, geographic location),<br /> -chat history and content, chatbot usage information and other electronic data submitted, stored, sent, or received by End Users and other personal information, the extent of which is determined and controlled by the Customer in its sole discretion,<br />- IT information (IP addresses, geographic location, usage data, cookies data, browser data).</td> </tr> <tr> <td><strong>Sensitive data</strong></td> <td>No. Other types of Personal Data are also not used to indirectly reveal information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation.</td> </tr> <tr> <td><strong>The frequency of the transfer</strong></td> <td>On a continuous basis until it is deleted in accordance with the Agreement and DPA terms.</td> </tr> <tr> <td><strong>Data source</strong></td> <td>Customers (or End Users) sign-up process and use of the Service by Customer (End User), including communication with subscribers and third-party integrations and apps linked by Customer (e.g. Facebook, Inc., Instagram, Telegram, Zapier and other integrations and apps specified at <a href="https://apps.manychat.com/">www.apps.manychat.com/</a> which are linked by Customer to its account in the Service).</td> </tr> <tr> <td><strong>Onward transfer</strong></td> <td>See the list of Sub-processors at <a href="https://manychat.com/legal/service-providers">www.manychat.com/legal/service-providers</a>.<br />The duration of sub-processing is limited to the retention period of Processing by Manychat specified in this table.</td> </tr> </tbody> </table> <h3 id="1b.-manychat-as-a-controller" tabindex="-1">1B. Manychat as a Controller</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Purpose and nature of Processing</strong></td> <td>Entering into the Agreement, account management, compliance with laws, including sanction laws, accounting, tax, billing, audit, sales and marketing communication with Customer.</td> </tr> <tr> <td><strong>Period for which the personal data will be retained</strong></td> <td>Until the termination of the Agreement, unsubscription from marketing communications and expiration of retention period required by law.</td> </tr> <tr> <td><strong>Categories of data subjects</strong></td> <td>- Customer and its representatives<br />- End Users</td> </tr> <tr> <td><strong>Categories of personal data</strong></td> <td>Customer and its representatives: full name, title, company, email.<br />End Users: identification information (id, name, email, status), linked pages and accounts, products in use, IT information (IP addresses, geographic location), financial information (credit card details, account details, payment information).</td> </tr> <tr> <td><strong>Sensitive data</strong></td> <td>Other types of Personal Data are also not used to indirectly reveal information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation.</td> </tr> <tr> <td><strong>The frequency of the transfer</strong></td> <td>On a continuous basis until it is deleted in accordance with the Agreement and DPA terms.</td> </tr> <tr> <td><strong>Data source</strong></td> <td>Customers sign up process and use of the Service by Customer.</td> </tr> <tr> <td><strong>Onward transfer</strong></td> <td>See the list of Service Providers at <a href="https://manychat.com/legal/service-providers">www.manychat.com/legal/service-providers</a>.<br />We may also disclose Personal Information to public authorities, such as law enforcement, if we are legally required to do so.</td> </tr> </tbody> </table> <h2 id="annex-2.-security-measures" tabindex="-1">ANNEX 2. Security Measures</h2> <p>Manychat implements and maintains technical and organizational security measures designed to protect Personal Data from Data Breaches. We currently observe the Security Measures described in this Annex 2. If applicable, this Annex 2 serves as Annex II to the EU Standard Contractual Clauses.</p> <p><strong>1. Security Program and Policies</strong></p> <p>1.1. Manychat maintains and enforces a risk-based security program and framework that addresses how we manage security. Manychat’s security framework is based on the ISO 27001 Information Security Management System and includes the following areas: Policies and Procedures, Asset Management, Access Management, Cryptography, Physical Security, Operations Security, Communications Security, Business Continuity Disaster Recovery Security, People Security, Product Security, Cloud and Network Infrastructure Security, Security Compliance, Third-Party Security, Vulnerability Management, and Security Monitoring and Incident Response.</p> <p>1.2. Our security program includes:</p> <ul> <li>documented policies that we approve, publish and communicate to appropriate personnel internally and review at least annually,</li> <li>documented, clear assignment of responsibility and authority for security program activities,</li> <li>regular testing of the key controls, systems and procedures.</li> </ul> <p><strong>2. Risk and Asset Management</strong></p> <p>2.1. Manychat utilizes an integrated risk management approach with a focus on both technical and operational security practices. Ongoing and systematic risk assessment is a consistent part of selecting appropriate improvement protection controls and ensuring that Personal Data is safe.</p> <p>2.2. Manychat takes reasonable actions to identify assets and their level of criticality. The full inventory and categorization are the basis to select and implement optimal technical and organizational security measures to make sure that the assets and information are protected.</p> <p><strong>3. Personnel security and awareness</strong></p> <p>3.1. Manychat’s personnel (employees and contractors) do not process Personal Data without authorization. Personnel is obligated to maintain the confidentiality of any Personal Data and this obligation continues even after their engagement ends.</p> <p>3.2. Manychat’s personnel (employees and contractors) acknowledge their data security and privacy responsibilities under Manychat’s policies.</p> <p>3.3. Manychat is focused on employee security awareness as a key driver to improve overall security maturity level and culture. Manychat’s personnel (employees and contractors) conduct security and privacy training at least annually.</p> <p>3.4. Pre-employment verification checks are carried out on all new employees and contractors.</p> <p><strong>4. Access Management</strong></p> <p>4.1. Manychat manages access based on “Need to know” and “Least privilege” principles. That means that personnel is only permitted to have access to Personal Data when needed for the performance of their functions.</p> <p>4.2. Manychat deactivates the authentication credentials of personnel immediately upon the termination of their employment or services.</p> <p>4.3. In order to access the production environment and critical systems, a user must have a unique username and password and multi-factor authentication enabled.</p> <p>4.4. Manychat implements measures to prevent information systems from being used by unauthorized persons, including the following measures (a) user identification and authentication procedures; (b) unique username/password (c) password complexity policies (special characters, minimum length, change of password) (c) automatic blocking (e.g., password or timeout).</p> <p>4.5. Manychat performs access monitoring and logging for the production environment and critical systems.</p> <p><strong>5. Technical and Application Security Measures</strong></p> <p>5.1. Manychat has implemented and will maintain appropriate technical and application security measures, internal controls, and information security routines intended to protect Personal Data against accidental loss, destruction, or alteration; unauthorized disclosure or access; or unlawful destruction as follows:</p> <ul> <li><strong>Segregation of environments</strong>. Manychat segregates development and production environments to make sure that Personal Data is protected from any kind of unauthorized access.</li> <li><strong>Encryption in transit.</strong> All external network communications are protected with encryption. We support the latest recommended secure cipher suites to encrypt all traffic in transit, including the use of TLS 1.2 protocols, AES256 encryption, and SHA2 hash functions, whenever supported by the clients.</li> <li><strong>Encryption at rest.</strong> Customer data at rest is encrypted using FIPS 140-2 compliant encryption standards, which applies to all types of data at rest within Manychat’s systems—relational databases, file drives, backups, etc. Access to cryptographic keys is restricted to a limited number of authorized Manychat personnel.</li> <li><strong>Redundancy</strong>. Manychat selects IT Infrastructure suppliers that are committed to provide mechanisms with built-in security best practices for confidentiality, integrity, and availability. Manychat’s main IaaS provider AWS (Frankfurt, EU) is committed to meet the strict Disaster Recovery (DR) Service Level Agreement.</li> <li><strong>Vulnerability assessment</strong>. Manychat performs automated and manual application and infrastructure security testing to identify and patch potential security vulnerabilities. Critical software patches are evaluated, tested, and applied proactively.</li> <li><strong>Penetration Testing</strong>. We engage independent service providers to perform penetration tests to assess the potential system security threats at least on an annual basis.</li> <li><strong>Software Development and Acquisition</strong>. Manychat follows security-by-design principles across different phases of the Service creation lifecycle from requirements gathering and product design all the way through product deployment. For the software developed by Manychat, Manychat follows secure coding standards and procedures set out in its standard operating procedures.</li> <li><strong>Storage.</strong> Manychat’s production databases and data processing servers are hosted in a data center located in AWS (Frankfurt, EU). Manychat maintains complete administrative control over the databases and virtual servers, and no third-party vendors have logical access to Personal Data.</li> <li><strong>Change Management.</strong> Manychat implements documented change management procedures that provide a consistent approach for controlling, implementing, and documenting changes (including emergency changes) for Manychat’s software, information systems or network architecture.</li> <li><strong>Network security.</strong> All network access between servers is restricted, using access control lists to allow only authorized services to interact in the network. We utilize third-party tools to detect, mitigate, and prevent Distributed Denial of Service (DDoS) attacks.</li> </ul> <p><strong>6. Third-Party Provider Management</strong></p> <p>6.1. Manychat may use third-party providers to provide the Services. In selecting third-party providers who may gain access to, store, transmit or use Personal Data, Manychat conducts a quality and security assessment pursuant to the provisions of its standard operating procedures.</p> <p>6.2. Manychat enters into written agreements with all of its providers which include confidentiality, privacy, and security obligations that provide an appropriate level of protection for Personal Data that these providers may Process.</p> <p><strong>7. Physical and Environmental Security</strong></p> <p>7.1. Manychat uses AWS data centers to host its production infrastructure. AWS data centers are strictly controlled both at the perimeter and at building ingress points by professional security staff utilizing video surveillance, intrusion detection systems, and other electronic means. Each data center has redundant electrical power systems that are available twenty-four (24) hours a day, seven (7) days a week.</p> <p>7.2. Manychat offices have a physical security program that manages visitors, building entrances, video surveillance, and overall office security. All employees, contractors, and visitors are required to wear identification badges.</p> <p>7.3. Manychat reviews third-party audit reports to verify that Manychat’s service providers maintain appropriate physical access controls for the managed data centers.</p> <p><strong>8. Resilience and Service Continuity</strong></p> <p>8.1. Manychat implements measures to ensure the ability to restore the availability and access to Personal Data in a timely manner in the event of a physical or technical incident, including:</p> <ul> <li>Ongoing Personal Data backup procedures. Backups are retained redundantly across multiple availability zones and encrypted in transit and at rest.</li> <li>Manychat uses specialized tools to monitor the Service performance. The alert is triggered in the event of any suboptimal server performance or overloaded capacity.</li> <li>Disaster recovery plans are in place to recover in case of Personal Data availability issues.</li> </ul> <p><strong>9. Security Certifications and Attestations.</strong></p> <p>9.1. Manychat holds the following security-related certifications and attestations:</p> <ul> <li> <p><strong>ISO 27001 Certification.</strong> The International Organization for Standardization 27001 Standard (ISO 27001) is an information security standard that ensures office sites, development centers, support centers, and data centers are securely managed. This certification is valid for 3 years (renewal audits) and is subject to annual touchpoint audits (surveillance audits).</p> </li> <li> <p><strong>SOC 2 Type 2 report.</strong> The SOC 2 Type 2 report, part of the Service Organization Control (SOC) framework from the American Institute of Certified Public Accountants (AICPA), evaluates the effectiveness of a service organization's controls over time, focusing on security, availability, and confidentiality. SOC 2 Type 2 report examines operational effectiveness over a period. It provides assurance on the consistent application of controls, crucial for client and stakeholder trust. This report requires annual renewal to maintain ongoing compliance.</p> </li> </ul> <p><strong>10. Information Security Incident Management</strong></p> <p>10.1. Manychat implements security incident management policies and procedures that address how we manage Data Breach and other security incidents.</p> <p>10.2. In case of Data Breach Manychat will promptly investigate the incident upon discovery. To the extent permitted by applicable law, Manychat will notify Customer of a Data Breach. Data Breach incident notifications will be provided to Customers via email or in the other way agreed with Customer.</p> <h2 id="annex-3.-international-provisions-and-jurisdiction-specific-terms" tabindex="-1">ANNEX 3. International Provisions and Jurisdiction Specific Terms</h2> <p><strong>1. California</strong></p> <p>If the Customer’s Applicable Data Protection Laws include the California Consumer Privacy Act (“<strong>CCPA</strong>”) the following provisions apply. The terms “business”, “commercial purpose”, “service provider”, “sell” and “personal information” have the meanings given in the CCPA. With respect to Customer Content, Manychat is a service provider under the CCPA.</p> <p>Manychat will not (i) sell Customer Data; (ii) retain, use or disclose any Customer Data for any purpose other than for the specific purpose of providing the Service, including retaining, using or disclosing the Customer Content for a commercial purpose other than providing the Service; or (iii) retain, use or disclose the Customer Content outside of the direct business relationship between Manychat and Customer.</p> <p>The parties acknowledge and agree that the Processing of Customer Content authorized by Customer’s instructions described in <a href="#2.-relationships-of-the-parties">Section 2.4</a> of DPA is integral to and encompassed by Manychat’s provision of the Service and the direct business relationship between the parties.</p> <p>Notwithstanding anything in the Agreement, the parties acknowledge and agree that Manychat’s access to Customer Content does not constitute part of the consideration exchanged by the parties in respect of the Agreement.</p> <p>Notwithstanding any use restriction contained elsewhere in this section, Manychat may de-identify or aggregate Customer Content as part of performing the Service specified in this DPA and the Agreement.</p> <p>Where Sub-processors Process Personal Data, Manychat takes steps to ensure that such Sub-processors are Service Providers under the CCPA with whom Manychat has entered into a written contract that includes terms substantially similar to this “California” section or are otherwise exempt from the CCPA’s definition of “sale”. Manychat conducts appropriate due diligence on its Sub-processors.</p> <p>With respect to Customer Account Data Manychat is the business with respect to such data and will Process such data in accordance with its Privacy Policy, which can be found at <a href="https://manychat.com/legal/privacy">www.manychat.com/legal/privacy</a>.</p> <p><strong>2. European Economic Area, Switzerland and the United Kingdom.</strong></p> <p>If the Customer’s Applicable Data Protection Laws include the General Data Protection Regulation (EU 2016/679) (“<strong>GDPR</strong>”), the Swiss Federal Act on Data Protection (“<strong>FADP</strong>”), or corresponding laws of the United Kingdom (including the UK GDPR and Data Protection Act 2018) (“<strong>UK GDPR</strong>”) the following provisions apply.</p> <p>To the extent Manychat processes Customer Personal Data originating from the EEA, United Kingdom, or Switzerland, Manychat represents that the transfer of personal data will be subject to the Data Privacy Framework (DPF) and will adhere to the DPF Principles.</p> <p>To the extent that Customer is (a) located in the United States of America and is self-certified under the Data Privacy Framework or (b) located in the EEA, UK or Switzerland, Manychat further agrees:</p> <ol> <li>to provide at least the same level of protection to any personal data as required by the Data Privacy Principles;</li> <li>to notify Customer in writing, without undue delay, if its self-certification to the Data Privacy Framework is withdrawn, terminated, revoked, or otherwise invalidated; and</li> <li>upon written notice, to work with Customer to take reasonable and appropriate steps to stop and remediate any unauthorized processing of personal data.</li> </ol> <p>In the event that the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF do not apply, Manychat relies on other data transfer mechanisms to transfer personal data outside the EEA, the UK, and Switzerland, such as Standard Contractual Clauses (SCC).</p> <p>In the event that the Standard Contractual Clauses regulate the transfer of Personal Data to Manychat, the following clauses apply:</p> <ol> <li> <p>for transfers of Personal Data <strong>subject to GDPR</strong> the parties apply Standard Contractual Clauses approved under the Commission Implementing Decision (EU) 2021/914 of 4 June 2021 published at <a href="https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=en">https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=en</a> (“<strong>EU SCCs</strong>”):</p> <ul> <li>for Customer Content: Module Two (Controller to Processor) or Module Three (Processor to Processor) depending on the status of Customer with respect to Customer Content.</li> <li>for Customer Account Data (e.g. if Customer transfers to Manychat data of its End Users or representatives): Module One (Controller to Controller).</li> </ul> <p>For each Module of EU SCCs, the following provisions apply, where applicable:</p> <ul> <li> <p>in Clause 7 of EU SCCs, the optional docking clause will not apply;</p> </li> <li> <p>in Clause 9 of EU SCCs, Option 2 will apply and the time period for prior written notice of sub-processor changes will be as set forth in Section 3.3 of DPA (Engagement of New Sub-processors);</p> </li> <li> <p>in Clause 11 of EU SCCs, the optional part on lodge of a complaint with an independent dispute resolution body will not apply;</p> </li> <li> <p>in Clause 17 (Option 1) of EU SCCs will be governed by the law of Germany;</p> </li> <li> <p>in Clause 18(b) of EU SCCs, disputes will be resolved before the courts of Germany;</p> </li> <li> <p>for Annex I, Part A of EU SCCs, the List of Parties is the following:</p> <ul> <li>Activities relevant to the data transferred under EU SCCs: The data importer provides the Service to the data exporter in accordance with the Agreement (<a href="https://manychat.com/legal/tos">Terms of Service</a> and <a href="https://manychat.com/legal/dpa">Data Processing Addendum</a>);</li> <li>Signature and date: The Parties agree that acceptance of the Terms of Service by Customer as specified in the Terms of Service, shall constitute execution of EU SCCs by both parties;</li> <li><strong>Data exporter(s)</strong> name, address: The Customer, as defined under the DPA, the Customer's address;</li> <li>Contact person’s name, position and contact details: Contact details for the data exporter are specified in the Terms of Service and, if not, are available to the data importer in the admin console of the Service (where such details have been provided by the data exporter);</li> <li>Role: for Module One (transfer of Customer Account Data): controller; for Module Two (transfer of Customer Content): controller; for Module Three (transfer of Customer Content): processor;</li> <li><strong>Data importer(s)</strong> name, address: MANYCHAT, INC., 2301 W Anderson Ln #102-105, Austin, TX 78757;</li> <li>Contact person’s name, position and contact details: Rickert Rechtsanwaltsgesellschaft mbH (Representative in the EU) email: <a href="mailto:art-27-rep-manychat@rickert.law">art-27-rep-manychat@rickert.law</a>;</li> <li>Role: for Module One (transfer of Customer Account Data): controller; for Module Two and Module Three (transfer of Customer Content): processor;</li> <li>for Annex I, Part B of EU SCCs, the Description of transfer is specified in <a href="#annex-1.-details-of-processing">Annex 1A to DPA</a> for Customer Content and in <a href="#1b.-manychat-as-a-controller">Annex 1B to DPA</a> for Customer Account Data transfer.</li> <li>for Annex I, Part C of EU SCCs, the Customer's competent supervisory will be determined in accordance with the GDPR and Clause 13 of EU SCCs.</li> </ul> </li> <li> <p>for Annex II of EU SCCs, the list of technical and organizational measures, including measures to ensure the security of the data are specified in <a href="#annex-2.-security-measures">Annex 2 to DPA</a>.</p> </li> <li> <p>for Annex III of EU SCCs, the list of sub-processors (for transfer of Customer Content under Module Two and Module Three) which the controller has authorized is specified at <a href="https://manychat.com/legal/service-providers">www.manychat.com/legal/service-providers</a>.</p> </li> </ul> </li> <li> <p>for transfers of Personal Data <strong>subject to FADP</strong> the parties apply EU SCCs as specified above with respect to Customer Content and Customer Account Data with the following modifications:</p> <ul> <li>references to "Regulation (EU) 2016/679" will be interpreted as references to the FADP;</li> <li>references to "EU law", "Union law" and "Member State law" will be interpreted as references to Swiss law;</li> <li>references to "EU", "Union" and "Member State" will be interpreted as references to Switzerland, and in particular, Clause 18 of EU SCCs must be interpreted as entitling data subjects to exercise their rights at their place of habitual residence in Switzerland;</li> <li>references to the "competent supervisory authority" and "competent courts" will be replaced with the "the Swiss Federal Data Protection and Information Commissioner" and the "relevant courts in Switzerland".</li> </ul> </li> <li> <p>for transfers of Personal Data <strong>subject to UK GDPR</strong> the parties apply EU SCCs as specified above with respect to Customer Content and Customer Account Data, together with the International data transfer addendum to the European Commission’s standard contractual clauses for international data transfers (Adopted by ICO, Version B1.0, in force 21 March 2022) published at <a href="https://ico.org.uk/media/for-organisations/documents/4019539/international-data-transfer-addendum.pdf">https://ico.org.uk/media/for-organisations/documents/4019539/international-data-transfer-addendum.pdf</a> as follows:</p> </li> </ol> <h3 id="part-1%3A-tables" tabindex="-1">Part 1: Tables</h3> <h4 id="table-1%3A-parties" tabindex="-1">Table 1: Parties</h4> <table> <colgroup> <col span="1" style="width: 20%"> <col span="1" style="width: 40%"> <col span="1" style="width: 40%"> </colgroup> <thead> <tr> <th></th> <th colspan="2"></th> </tr> </thead> <tbody> <tr> <td><b>Start date</b></td> <td colspan="2">Effective date of the Terms of Service and Data Processing Addendum.</td> </tr> <tr> <td><b>The Parties</b></td> <td><b>Exporter (who sends the Restricted Transfer)</b></td> <td><b>Importer (who receives the Restricted Transfer)</b></td> </tr> </tr> <tr> <td><b>Parties’ details</b></td> <td>Full legal name: MANYCHAT INC.<br />Trading name (if different): n/a<br />Main address (if a company registered address): 2301 W Anderson Ln #102-105, Austin, TX 78757<br />Official registration number (if any) (company number or similar identifier): 81-1410171 </td> <td>Full legal name: Customer (as set forth in the Terms of Service)<br />Trading name (if different):<br />Main address (if a company registered address): as set forth in the Terms of Service<br />Official registration number (if any) (company number or similar identifier): </td> </tr> <tr> <td><b>Key Contact</b></td> <td>Full Name (optional): Rickert Rechtsanwaltsgesellschaft m.b.H<br />Job Title: Representative in the EU<br />Contact details including email:<br /><a href="mailto:art-27-rep-manychat@rickert.law">art-27-rep-manychat@rickert.law</a> </td> <td>Full Name (optional):<br />Job Title: as set forth in the Terms of Service<br />Contact details including email: as set forth in the Terms of Service </td> </tr> <tr> <td><b>Signature (if required for the purposes of Section 2)</b></td> <td></td> <td></td> </tr> </tbody> </table> <h4 id="table-2%3A-selected-sccs%2C-modules-and-selected-clauses" tabindex="-1">Table 2: Selected SCCs, Modules and Selected Clauses</h4> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Addendum EU SCCs</strong></td> <td>☑ The version of the Approved EU SCCs which this Addendum is appended to, detailed below, including the Appendix Information:<br />EU SCCs as specified in Section 2A of this Annex 3:<br />- For Customer Content (Module Two: Transfer controller to processor, Module Three: Transfer processor to processor)<br />- For Customer Account Data (Module One: Transfer controller to controller)</td> </tr> </tbody> </table> <h4 id="table-3%3A-appendix-information" tabindex="-1">Table 3: Appendix Information</h4> <p>“<strong>Appendix Information</strong>” means the information which must be provided for the selected modules as set out in the Appendix of the Approved EU SCCs (other than the Parties), and which for this Addendum is set out in:</p> <table> <thead> <tr> <th></th> </tr> </thead> <tbody> <tr> <td>Annex 1A: List of Parties: see Section 2A of this Annex 3.</td> </tr> <tr> <td>Annex 1B: Description of Transfer: see <a href="#annex-1.-details-of-processing">Annex 1 to DPA</a>.</td> </tr> <tr> <td>Annex II: Technical and organisational measures including technical and organisational measures to ensure the security of the data: see <a href="https://manychat.com/legal/dpa">www.manychat.com/legal/dpa</a></td> </tr> <tr> <td>Annex III: List of Sub processors (Modules 2 and 3 only): see the list of Sub-processors at <a href="https://manychat.com/legal/service-providers">www.manychat.com/legal/service-providers</a>.</td> </tr> </tbody> </table> <h4 id="table-4%3A-ending-this-addendum-when-the-approved-addendum-changes" tabindex="-1">Table 4: Ending this Addendum when the Approved Addendum Changes</h4> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Ending this Addendum when the Approved Addendum changes</strong></td> <td>Which Parties may end this Addendum as set out in Section 19:<br />☑ Importer<br />☑ Exporter<br />☐ neither Party</td> </tr> </tbody> </table> <h3 id="alternative-part-2-mandatory-clauses%3A" tabindex="-1">Alternative Part 2 Mandatory Clauses:</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Mandatory Clauses</strong></td> <td>Part 2: Mandatory Clauses of the Approved Addendum, being the template Addendum B.1.0 issued by the ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section 18 of those Mandatory Clauses.</td> </tr> </tbody> </table> </div></article></section><section class="p_y-xxl text_white text_center bg_black "><div class="w w_l flex flex_fdc flex_aic m_b-m tn-m_b-l text_center "><h2 class="h2 flex-item_10">Try Manychat for free</h2><div class="flex-item_8 m_t-s tn-m_t-m subline TrySection_rich-subline__IRHr0"><p>Transform more conversations into sales, leads, and conversions today</p></div></div><a class="p_y-s p_x-l !px-2rem !font-cofo !rounded-[10rem] !py-[1.4rem] !text-[1.4rem]/[2rem] !font-normal !uppercase !tracking-[0.01em] before:!rounded-[10rem] caps b_rd-xl pointer inline-block button button_inverted button_accented " label="Get Started" href="https://app.manychat.com/signup"><span class="text_center flex_jcc height flex_aic mx-0.8rem flex"><span class="button__center"><span>Get Started</span><span class="button__before">Get Started</span><span class="button__after">Get Started</span></span></span></a></section></main><footer class="Footer_footer__SqwoT p_t-l tn-p_t-xl text_white bg_black"><div class="w w_m m_b-s tn-m_b-0"><div class="grid grid_5 grid_gap"><div class="relative flex Footer_logo___gJUM"><a class="width " href="/"><img src="https://mccdn.me/martech/next-lp//_next/static/media/logo-white.93c1c234.svg" class="width block" alt="Manychat logo" loading="lazy"/></a></div><div><div class="m_b-xs p_x-xs text_dark-grey caps">Manychat</div><ul class="m_y-xs Footer_links__JCb_o"><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/about">About</a></li><li><a href="https://careers.manychat.com/" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Careers</a></li><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/security">Privacy & Security</a></li></ul></div><div><div class="m_b-xs p_x-xs text_dark-grey caps">Agencies</div><ul class="m_y-xs Footer_links__JCb_o"><li><a href="https://manychat.com/agency/listing/" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Hire an Agency</a></li><li><a href="/affiliate/" rel="" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Join the Affiliate Program</a></li></ul></div><div><div class="m_b-xs p_x-xs text_dark-grey caps">Product</div><ul class="m_y-xs Footer_links__JCb_o"><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/product/messenger-marketing">Messenger</a></li><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/product/instagram">Instagram</a></li><li><a href="/product/ai/" target="_self" rel="" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Manychat AI</a></li><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/sms-marketing">SMS Marketing</a></li><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/integrations">Integrations</a></li><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/meet-chatmarketing-for-ecommerce">For eCommerce</a></li><li><a href="https://community.manychat.com/product-updates" rel="noopener noreferrer" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Changelog</a></li><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/pricing">Pricing</a></li></ul></div><div><div class="m_b-xs p_x-xs text_dark-grey caps">Resources</div><ul class="m_y-xs Footer_links__JCb_o"><li><a href="https://status.manychat.com/" rel="noopener noreferrer" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Status Page</a></li><li><a href="https://help.manychat.com/" rel="noopener noreferrer" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Help Center</a></li><li><a href="https://community.manychat.com/" rel="noopener noreferrer" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Community</a></li><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/resources/video-course">Video Course</a></li><li><a class="p_y-xs p_x-xs Footer_footer-link__KC3kN " href="/resources/how-to">How To</a></li><li><a href="/blog/" rel="" class="p_y-xs p_x-xs Footer_footer-link__KC3kN">Blog</a></li><li><a href="#" class="p_y-xs p_x-xs Footer_footer-link__KC3kN ">Privacy Settings</a></li></ul></div></div></div><div class="p_y-l tn-p_y-xl text_white bg_black flex flex_fww grid_gap flex_fdc tn-flex_fdr flex_c text_s"><div class="caps">©2025, Manychat, Inc.</div><a href="/legal/privacy" target="_blank" rel="noreferrer nofollow" class="caps tn-m_l-xs underline_link">Privacy Policy</a><a href="/legal/tos" target="_blank" rel="noreferrer nofollow" class="caps tn-m_l-xs underline_link">Terms of Service</a></div></footer></div></div><script id="consent-mode" type="text/javascript"> // create dataLayer window.dataLayer = window.dataLayer || []; function gtag() { dataLayer.push(arguments); } // set „denied" as default for both ad and analytics storage, as well as ad_user_data and ad_personalization, gtag("consent", "default", { ad_user_data: "denied", ad_personalization: "denied", ad_storage: "denied", analytics_storage: "denied", wait_for_update: 2000 // milliseconds to wait for update }); // Enable ads data redaction by default [optional] gtag("set", "ads_data_redaction", true); gtag("js", new Date()); gtag("config", "G-BB8728WKW2"); </script><script type="text/javascript" data-usercentrics="Google Analytics" src="https://www.googletagmanager.com/gtag/js?id=G-BB8728WKW2"></script><script id="consent-mode" type="text/javascript"> window.addEventListener("ucEvent", function (e) { if( e.detail && e.detail.event == "consent_status") { var ucAnalyticsService = 'Google Analytics'; var ucAdService = 'Google Ads Remarketing'; if(e.detail.hasOwnProperty(ucAnalyticsService) && e.detail.hasOwnProperty(ucAdService)) { gtag("consent", "update", { ad_storage: e.detail[ucAdService] ? 'granted':'denied', ad_user_data: e.detail[ucAdService] ? 'granted':'denied', ad_personalization: e.detail[ucAdService] ? 'granted':'denied', analytics_storage: e.detail[ucAnalyticsService] ? 'granted':'denied' }); } else { if(e.detail.hasOwnProperty(ucAdService)) { gtag("consent", "update", { ad_storage: e.detail[ucAdService] ? 'granted':'denied', ad_user_data: e.detail[ucAdService] ? 'granted':'denied', ad_personalization: e.detail[ucAdService] ? 'granted':'denied' }); } if(e.detail.hasOwnProperty(ucAnalyticsService)) { gtag("consent", "update", { analytics_storage: e.detail[ucAnalyticsService] ? 'granted':'denied' }); } } } }); </script><script type="text/plain" data-usercentrics="Google Analytics" src="https://www.googletagmanager.com/gtag/js?id=UA-73011234-8"></script><script type="text/plain" data-usercentrics="Google Analytics"> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-73011234-8'); </script><script type="text/plain" data-usercentrics="Facebook Pixel"> !function(f,b,e,v,n,t,s) {if(f.fbq)return;n=f.fbq=function(){n.callMethod? n.callMethod.apply(n,arguments):n.queue.push(arguments)}; if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0'; n.queue=[];t=b.createElement(e);t.async=!0; t.src=v;s=b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t,s)}(window, document,'script', 'https://connect.facebook.net/en_US/fbevents.js'); fbq('dataProcessingOptions', ['LDU'], 0, 0); fbq('init', '444325236063408'); fbq('track', 'PageView'); </script><script type="text/plain" data-usercentrics="reCAPTCHA" src="https://www.google.com/recaptcha/enterprise.js?render=6LfBOksmAAAAAP5VKxWHs8BEVIzclzGp9VcernfJ"></script><script type="text/plain" data-usercentrics="TikTok"> !function (w, d, t) { w.TiktokAnalyticsObject=t;var ttq=w[t]=w[t]||[];ttq.methods=["page","track","identify","instances","debug","on","off","once","ready","alias","group","enableCookie","disableCookie","holdConsent","revokeConsent","grantConsent"],ttq.setAndDefer=function(t,e){t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}};for(var i=0;i<ttq.methods.length;i++)ttq.setAndDefer(ttq,ttq.methods[i]);ttq.instance=function(t){for( var e=ttq._i[t]||[],n=0;n<ttq.methods.length;n++)ttq.setAndDefer(e,ttq.methods[n]);return e},ttq.load=function(e,n){var r="https://analytics.tiktok.com/i18n/pixel/events.js",o=n&&n.partner;ttq._i=ttq._i||{},ttq._i[e]=[],ttq._i[e]._u=r,ttq._t=ttq._t||{},ttq._t[e]=+new Date,ttq._o=ttq._o||{},ttq._o[e]=n||{};n=document.createElement("script") ;n.type="text/javascript",n.async=!0,n.src=r+"?sdkid="+e+"&lib="+t;e=document.getElementsByTagName("script")[0];e.parentNode.insertBefore(n,e)}; ttq.load('CTS1HTRC77UDUQAQVAD0'); ttq.page(); }(window, document, 'ttq'); </script><script src="https://mccdn.me/martech/next-lp/_next/static/chunks/webpack-34c4ce02ae79bcf8.js" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0]);self.__next_f.push([2,null])</script><script>self.__next_f.push([1,"1:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/e527e5ae976e5785.css\",\"style\"]\n2:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/78d2265c972bd054.css\",\"style\"]\n3:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/a0d971e68e58f050.css\",\"style\"]\n4:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/be1cee03285d53fa.css\",\"style\"]\n5:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/49ccd43e14e84871.css\",\"style\"]\n6:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/45ae78229736dcae.css\",\"style\"]\n7:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/604359d8fd3b947d.css\",\"style\"]\n8:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/1451bafdf9bcdc11.css\",\"style\"]\n9:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/f94abfc2af041c2b.css\",\"style\"]\na:HL[\"https://mccdn.me/martech/next-lp/_next/static/css/e8c8bd90e2037cf8.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"b:I[11815,[],\"\"]\ne:I[55092,[],\"\"]\n10:I[82023,[],\"\"]\n11:I[53992,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"1439\",\"static/chunks/app/(en)/layout-3083956be3c7c92c.js\"],\"default\",1]\n12:I[60411,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"9186\",\"static/chunks/app/(en)/legal/%5Bslug%5D/page-ccbc09fb186beb9f.js\"],\"TopBarThemeProvider\"]\n13:I[18268,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"9186\",\"static/chunks/app/(en)/legal/%5Bslug%5D/page-ccbc09fb186beb9f.js\"],\"HostnameProvider\"]\n14:I[48014,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"9186\",\"static/chunks/app/(en)/legal/%5Bslug%5D/page-ccbc09fb186beb9f.js\"],\"ExperimentProvider\"]\n15:I[72583,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"9186\",\"static/chunks/app/(en)/legal/%5Bslug%5D/page-ccbc09fb186beb9f.js\"],\"CountryProvider\"]\n16:I[62511,[\"2044\",\"static/chunks/891cff7f-fe2567c447b0469b.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"6556\",\"static/chunks/6556-d1062628c3af0273.js\",\"3185\",\"static/chunks/app/layout-8fade966b47c3a52.js\"],\"default\"]\n17:I[43538,[\"2044\",\"static/chunks/891cff7f-fe2567c447"])</script><script>self.__next_f.push([1,"b0469b.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"6556\",\"static/chunks/6556-d1062628c3af0273.js\",\"3185\",\"static/chunks/app/layout-8fade966b47c3a52.js\"],\"default\"]\n18:I[73027,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"7601\",\"static/chunks/app/error-169d85246f1e6dab.js\"],\"default\"]\n19:I[70600,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"9160\",\"static/chunks/app/not-found-9df21fe005aa1e9d.js\"],\"default\"]\n1d:I[44622,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"6470\",\"static/chunks/app/global-error-9137abac75965be4.js\"],\"default\"]\nf:[\"slug\",\"dpa\",\"d\"]\n1a:T6d6,\n window.addEventListener(\"ucEvent\", function (e) {\n if( e.detail \u0026\u0026 e.detail.event == \"consent_status\") {\n var ucAnalyticsService = 'Google Analytics';\n var ucAdService = 'Google Ads Remarketing';\n\n if(e.detail.hasOwnProperty(ucAnalyticsService) \u0026\u0026 e.detail.hasOwnProperty(ucAdService))\n {\n gtag(\"consent\", \"update\", {\n ad_storage: e.detail[ucAdService] ? 'granted':'denied',\n ad_user_data: e.detail[ucAdService] ? 'granted':'denied',\n ad_personalization: e.detail[ucAdService] ? 'granted':'denied',\n analytics_storage: e.detail[ucAnalyticsService] ? 'granted':'denied'\n });\n }\n else {\n if(e.detail.hasOwnProperty(ucAdService)) {\n gtag(\"consent\", \"upd"])</script><script>self.__next_f.push([1,"ate\", {\n ad_storage: e.detail[ucAdService] ? 'granted':'denied',\n ad_user_data: e.detail[ucAdService] ? 'granted':'denied',\n ad_personalization: e.detail[ucAdService] ? 'granted':'denied'\n });\n }\n if(e.detail.hasOwnProperty(ucAnalyticsService)) {\n gtag(\"consent\", \"update\", {\n analytics_storage: e.detail[ucAnalyticsService] ? 'granted':'denied'\n });\n }\n }\n }\n });\n 1b:T416,\n !function (w, d, t) {\n w.TiktokAnalyticsObject=t;var ttq=w[t]=w[t]||[];ttq.methods=[\"page\",\"track\",\"identify\",\"instances\",\"debug\",\"on\",\"off\",\"once\",\"ready\",\"alias\",\"group\",\"enableCookie\",\"disableCookie\",\"holdConsent\",\"revokeConsent\",\"grantConsent\"],ttq.setAndDefer=function(t,e){t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}};for(var i=0;i\u003cttq.methods.length;i++)ttq.setAndDefer(ttq,ttq.methods[i]);ttq.instance=function(t){for(\nvar e=ttq._i[t]||[],n=0;n\u003cttq.methods.length;n++)ttq.setAndDefer(e,ttq.methods[n]);return e},ttq.load=function(e,n){var r=\"https://analytics.tiktok.com/i18n/pixel/events.js\",o=n\u0026\u0026n.partner;ttq._i=ttq._i||{},ttq._i[e]=[],ttq._i[e]._u=r,ttq._t=ttq._t||{},ttq._t[e]=+new Date,ttq._o=ttq._o||{},ttq._o[e]=n||{};n=document.createElement(\"script\")\n;n.type=\"text/javascript\",n.async=!0,n.src=r+\"?sdkid=\"+e+\"\u0026lib=\"+t;e=document.getElementsByTagName(\"script\")[0];e.parentNode.insertBefore(n,e)};\n\n ttq.load('CTS1HTRC77UDUQAQVAD0');\n ttq.page();\n}(window, document, 'ttq');\n 1e:[]\n"])</script><script>self.__next_f.push([1,"0:[\"$\",\"$Lb\",null,{\"buildId\":\"6h86nHAe7ZdhEaqWYYSB1\",\"assetPrefix\":\"https://mccdn.me/martech/next-lp\",\"urlParts\":[\"\",\"legal\",\"dpa\"],\"initialTree\":[\"\",{\"children\":[\"(en)\",{\"children\":[\"legal\",{\"children\":[[\"slug\",\"dpa\",\"d\"],{\"children\":[\"__PAGE__\",{}]}]}]}]},\"$undefined\",\"$undefined\",true],\"initialSeedData\":[\"\",{\"children\":[\"(en)\",{\"children\":[\"legal\",{\"children\":[[\"slug\",\"dpa\",\"d\"],{\"children\":[\"__PAGE__\",{},[[\"$Lc\",\"$Ld\",null],null],null]},[null,[\"$\",\"$Le\",null,{\"parallelRouterKey\":\"children\",\"segmentPath\":[\"children\",\"(en)\",\"children\",\"legal\",\"children\",\"$f\",\"children\"],\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L10\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"notFoundStyles\":\"$undefined\"}]],null]},[null,[\"$\",\"$Le\",null,{\"parallelRouterKey\":\"children\",\"segmentPath\":[\"children\",\"(en)\",\"children\",\"legal\",\"children\"],\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L10\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"notFoundStyles\":\"$undefined\"}]],null]},[[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/49ccd43e14e84871.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/45ae78229736dcae.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"2\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/604359d8fd3b947d.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"3\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/1451bafdf9bcdc11.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"4\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/f94abfc2af041c2b.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"5\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/e8c8bd90e2037cf8.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}]],[\"$\",\"$L11\",null,{\"children\":[\"$\",\"$Le\",null,{\"parallelRouterKey\":\"children\",\"segmentPath\":[\"children\",\"(en)\",\"children\"],\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L10\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"notFoundStyles\":\"$undefined\"}],\"params\":{}}]],null],null]},[[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/e527e5ae976e5785.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/78d2265c972bd054.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"2\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/a0d971e68e58f050.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"3\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/be1cee03285d53fa.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}]],[\"$\",\"html\",null,{\"style\":{\"--top-banner-height\":\"0px\"},\"className\":\"\",\"children\":[[\"$\",\"head\",null,{\"children\":[[\"$\",\"script\",null,{\"type\":\"text/plain\",\"data-usercentrics\":\"Manychat Analytics\",\"async\":true,\"src\":\"https://manychat.com/js/extvisit.js\"}],[\"$\",\"script\",null,{\"children\":\"if (!window.globalThis) window.globalThis=window\"}],[\"$\",\"link\",null,{\"rel\":\"preconnect\",\"href\":\"//app.usercentrics.eu\"}],[\"$\",\"link\",null,{\"rel\":\"preconnect\",\"href\":\"//api.usercentrics.eu\"}],[\"$\",\"link\",null,{\"rel\":\"preconnect\",\"href\":\"//privacy-proxy.usercentrics.eu\"}],[\"$\",\"link\",null,{\"rel\":\"preload\",\"href\":\"//web.cmp.usercentrics.eu/ui/loader.js\",\"as\":\"script\"}],[\"$\",\"link\",null,{\"rel\":\"preconnect\",\"href\":\"https://www.google.com\"}],[\"$\",\"link\",null,{\"rel\":\"preconnect\",\"href\":\"https://www.gstatic.com\",\"crossOrigin\":\"\"}],[\"$\",\"script\",null,{\"async\":true,\"id\":\"usercentrics-cmp\",\"src\":\"https://web.cmp.usercentrics.eu/ui/loader.js\",\"data-ruleset-id\":\"Iq840wqtUrxM4w\"}],[\"$\",\"script\",null,{\"async\":true,\"type\":\"text/plain\",\"data-usercentrics\":\"Microsoft Clarity\",\"dangerouslySetInnerHTML\":{\"__html\":\"\\n (function(c,l,a,r,i,t,y){\\n c[a]=c[a]||function(){(c[a].q=c[a].q||[]).push(arguments)};\\n t=l.createElement(r);t.async=1;t.src=\\\"https://www.clarity.ms/tag/\\\"+i;\\n y=l.getElementsByTagName(r)[0];y.parentNode.insertBefore(t,y);\\n })(window, document, \\\"clarity\\\", \\\"script\\\", \\\"mbuibzew5z\\\");\\n \"}}]]}],[\"$\",\"body\",null,{\"children\":[[\"$\",\"$L12\",null,{\"children\":[\"$\",\"$L13\",null,{\"appHostname\":\"app.manychat.com\",\"children\":[\"$\",\"$L14\",null,{\"children\":[\"$\",\"$L15\",null,{\"country\":\"SG\",\"children\":[[\"$\",\"$L16\",null,{}],[\"$\",\"$L17\",null,{\"children\":[\"$\",\"$Le\",null,{\"parallelRouterKey\":\"children\",\"segmentPath\":[\"children\"],\"error\":\"$18\",\"errorStyles\":[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/49ccd43e14e84871.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/45ae78229736dcae.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"2\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/604359d8fd3b947d.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"3\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/1451bafdf9bcdc11.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"4\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/f94abfc2af041c2b.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"5\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/e8c8bd90e2037cf8.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}]],\"errorScripts\":[],\"template\":[\"$\",\"$L10\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[\"$\",\"$L19\",null,{}],\"notFoundStyles\":[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/49ccd43e14e84871.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/45ae78229736dcae.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"2\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/604359d8fd3b947d.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"3\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/1451bafdf9bcdc11.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"4\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/f94abfc2af041c2b.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}],[\"$\",\"link\",\"5\",{\"rel\":\"stylesheet\",\"href\":\"https://mccdn.me/martech/next-lp/_next/static/css/e8c8bd90e2037cf8.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\"}]]}]}]]}]}]}]}],[\"$\",\"script\",null,{\"id\":\"consent-mode\",\"type\":\"text/javascript\",\"dangerouslySetInnerHTML\":{\"__html\":\"\\n // create dataLayer\\n window.dataLayer = window.dataLayer || [];\\n function gtag() {\\n dataLayer.push(arguments);\\n }\\n\\n // set „denied\\\" as default for both ad and analytics storage, as well as ad_user_data and ad_personalization,\\n gtag(\\\"consent\\\", \\\"default\\\", {\\n ad_user_data: \\\"denied\\\",\\n ad_personalization: \\\"denied\\\",\\n ad_storage: \\\"denied\\\",\\n analytics_storage: \\\"denied\\\",\\n wait_for_update: 2000 // milliseconds to wait for update\\n });\\n\\n // Enable ads data redaction by default [optional]\\n gtag(\\\"set\\\", \\\"ads_data_redaction\\\", true);\\n\\n gtag(\\\"js\\\", new Date());\\n gtag(\\\"config\\\", \\\"G-BB8728WKW2\\\");\\n \"}}],[\"$\",\"script\",null,{\"type\":\"text/javascript\",\"data-usercentrics\":\"Google Analytics\",\"src\":\"https://www.googletagmanager.com/gtag/js?id=G-BB8728WKW2\"}],[\"$\",\"script\",null,{\"id\":\"consent-mode\",\"type\":\"text/javascript\",\"dangerouslySetInnerHTML\":{\"__html\":\"$1a\"}}],[\"$\",\"script\",null,{\"type\":\"text/plain\",\"data-usercentrics\":\"Google Analytics\",\"src\":\"https://www.googletagmanager.com/gtag/js?id=UA-73011234-8\"}],[\"$\",\"script\",null,{\"type\":\"text/plain\",\"data-usercentrics\":\"Google Analytics\",\"dangerouslySetInnerHTML\":{\"__html\":\"\\n window.dataLayer = window.dataLayer || [];\\n function gtag(){dataLayer.push(arguments);}\\n gtag('js', new Date());\\n\\n gtag('config', 'UA-73011234-8');\\n \"}}],[\"$\",\"script\",null,{\"type\":\"text/plain\",\"data-usercentrics\":\"Facebook Pixel\",\"dangerouslySetInnerHTML\":{\"__html\":\"\\n !function(f,b,e,v,n,t,s)\\n {if(f.fbq)return;n=f.fbq=function(){n.callMethod?\\n n.callMethod.apply(n,arguments):n.queue.push(arguments)};\\n if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';\\n n.queue=[];t=b.createElement(e);t.async=!0;\\n t.src=v;s=b.getElementsByTagName(e)[0];\\n s.parentNode.insertBefore(t,s)}(window, document,'script',\\n 'https://connect.facebook.net/en_US/fbevents.js');\\n fbq('dataProcessingOptions', ['LDU'], 0, 0);\\n fbq('init', '444325236063408');\\n fbq('track', 'PageView');\\n \"}}],[\"$\",\"script\",null,{\"type\":\"text/plain\",\"data-usercentrics\":\"reCAPTCHA\",\"src\":\"https://www.google.com/recaptcha/enterprise.js?render=6LfBOksmAAAAAP5VKxWHs8BEVIzclzGp9VcernfJ\"}],[\"$\",\"script\",null,{\"type\":\"text/plain\",\"data-usercentrics\":\"TikTok\",\"dangerouslySetInnerHTML\":{\"__html\":\"$1b\"}}]]}]]}]],null],null],\"couldBeIntercepted\":false,\"initialHead\":[null,\"$L1c\"],\"globalErrorComponent\":\"$1d\",\"missingSlots\":\"$W1e\"}]\n"])</script><script>self.__next_f.push([1,"1f:I[10549,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"9186\",\"static/chunks/app/(en)/legal/%5Bslug%5D/page-ccbc09fb186beb9f.js\"],\"default\"]\n20:I[88901,[\"6037\",\"static/chunks/6037-d8b0132ecf058e58.js\",\"6404\",\"static/chunks/6404-90cf9092b93c58bd.js\",\"9715\",\"static/chunks/9715-a84de278621dfb3a.js\",\"8951\",\"static/chunks/8951-902db517a437cfb4.js\",\"1700\",\"static/chunks/1700-f227dd53c37b6957.js\",\"9186\",\"static/chunks/app/(en)/legal/%5Bslug%5D/page-ccbc09fb186beb9f.js\"],\"default\"]\n21:Tdb69,"])</script><script>self.__next_f.push([1,"\u003ch2 id=\"data-processing-addendum\" tabindex=\"-1\"\u003eData Processing Addendum\u003c/h2\u003e\n\u003cp\u003eIn the course of providing Manychat services, Manychat processes certain personal data related to сustomers, their representatives, end users and customer’s subscribers. While doing so, Manychat acts as a processor on behalf of a сustomer and as a controller. This Data Processing Addendum (“\u003cstrong\u003eDPA\u003c/strong\u003e”) sets forth terms and conditions of such processing by Manychat.\u003c/p\u003e\n\u003cp\u003eThe DPA forms an integral part of the \u003ca href=\"https://manychat.com/legal/tos\"\u003eTerms of Service\u003c/a\u003e (“\u003cstrong\u003eAgreement\u003c/strong\u003e”) entered into by and between Manychat, Inc., its subsidiaries or affiliates, as applicable (“\u003cstrong\u003eManychat\u003c/strong\u003e”) and the customer, being the party to the Agreement (“\u003cstrong\u003eCustomer\u003c/strong\u003e”).\u003c/p\u003e\n\u003ch4 id=\"table-of-contents\" tabindex=\"-1\"\u003eTable of Contents\u003c/h4\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"#data-processing-addendum\"\u003e1. Data Processing Addendum\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#1.-definitions\"\u003e1.1. Definitions\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#2.-relationships-of-the-parties\"\u003e1.2. Relationships of the Parties\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#3.-sub-processing\"\u003e1.3. Sub-processing\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#4.-security-measures\"\u003e1.4. Security Measures\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#5.-security-reviews-and-reports\"\u003e1.5. Security Reviews and Reports\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#6.-data-breach-and-notification\"\u003e1.6. Data Breach and Notification\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#7.-data-subject-rights-and-cooperation\"\u003e1.7. Data Subject Rights and Cooperation\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#8.-return-or-deletion-of-data\"\u003e1.8. Return or Deletion of Data\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#9.-miscellaneous\"\u003e1.9. Miscellaneous\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"#annex-1.-details-of-processing\"\u003eANNEX 1. Details of Processing\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#1a.-manychat-as-a-processor\"\u003e1A. Manychat as a Processor\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"#1b.-manychat-as-a-controller\"\u003e1B. Manychat as a Controller\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"#annex-2.-security-measures\"\u003eANNEX 2. Security Measures\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"#annex-3.-international-provisions-and-jurisdiction-specific-terms\"\u003eANNEX 3. International Provisions and Jurisdiction Specific Terms\u003c/a\u003e\u003c/strong\u003e\u003c/p\u003e\n\u003ch3 id=\"1.-definitions\" tabindex=\"-1\"\u003e1. Definitions\u003c/h3\u003e\n\u003cp\u003e“\u003cstrong\u003eApplicable\u003c/strong\u003e \u003cstrong\u003eData Protection Laws\u003c/strong\u003e” means all privacy and data protection laws and regulations applicable to either party under the Agreement. Every party determines on its own its Applicable Data Protection Laws and understands that for Manychat and Customer Applicable Data Protection Laws may be different.\u003c/p\u003e\n\u003cp\u003e\u0026quot;\u003cstrong\u003eController\u003c/strong\u003e” means a person or legal entity that determines the purposes and means of the Personal Data Processing.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eCustomer\u003c/strong\u003e” means Party to the Agreement with Manychat. Customer may be a client, marketing agency, individual, individual entrepreneur or legal entity on behalf of which End Users use the Service.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eCustomer Account Data\u003c/strong\u003e” means Personal Data related to Customer, its representatives and End Users which Manychat processes as a separate Controller as more particularly described in this DPA.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eCustomer Content\u003c/strong\u003e” means Personal Data related to End Users and Customer’s Subscribers which Manychat processes on behalf of Customer as a Processor in the course of providing the Service, as more particularly described in this DPA.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eCustomer’s Subscribers\u003c/strong\u003e” Data Subjects with whom Customer communicates with use of the Service and(or) whose data is uploaded to the Service by Customer (customers, prospective customers, social media and messaging platform contacts or other individuals).\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eData Breach\u003c/strong\u003e” means any confirmed unauthorized or unlawful breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to Personal Data being Processed by Manychat. Data Breach does not include unsuccessful attempts or activities that do not compromise the security of Personal Data, including unsuccessful log-in attempts, pings, port scans, denial of service attacks or other network attacks on firewalls or networked systems.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eData Privacy Frameworks\u003c/strong\u003e” means the EU-U.S Data Privacy Framework (“EU-U.S. DPF”), the Swiss-U.S. Data Privacy Framework (“Swiss DPF”), and the UK Extension to the EU-U.S. DPF (“UK Extension”) as administered by the U.S. Department of Commerce.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eData Subject\u003c/strong\u003e” means an identified or identifiable natural person to whom Personal Data relates.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eEnd Users\u003c/strong\u003e” means Customer and other Data Subjects with lawful access to the Service on behalf of or under a lawful authorization of Customer.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003ePersonal Data\u003c/strong\u003e” means “personal data”, “personal information”, “personally identifiable information” or similar information defined in and governed by Applicable Data Protection Laws and means any information relating to Data Subject. Under this DPA, Personal Data covers Customer Content and Customer Account Data. If the term Personal Data is used, then such provisions apply to both Customer Content and Customer Account Data.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eProcessing\u003c/strong\u003e” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eProcessor\u003c/strong\u003e” means an entity that processes Personal Data on behalf of a Controller.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eService\u003c/strong\u003e” means any product or service provided by Manychat to Customer pursuant to the Agreement.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eStandard Contractual Clauses\u003c/strong\u003e” means (i) where the GDPR applies, the standard contractual clauses annexed to the European Commission's Implementing Decision 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the European Council (available as of June 2021 \u003ca href=\"https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj\"\u003ehttps://eur-lex.europa.eu/eli/dec_impl/2021/914/oj\u003c/a\u003e), (the “EU SCCs”); (ii) where the UK GDPR applies, the applicable standard data protection clauses adopted pursuant to Article 46(2)(c) or (d) of the UK GDPR including the standard data protection clauses issued by the commissioner under s119A(1) of the UK DPA 2018 as revised from time to time (“UK Addendum”); and (iii) where the Swiss DPA applies, the applicable standard data protection clauses issued, approved or recognized by the Swiss Federal Data Protection and Information Commissioner (the “Swiss SCCs”), in each case as completed as described in Annex 3 (International Provisions and Jurisdiction Specific Terms) below.\u003c/p\u003e\n\u003cp\u003e“\u003cstrong\u003eSub-processor\u003c/strong\u003e” means any Processor engaged by Manychat to assist in fulfilling its obligations with respect to providing the Service pursuant to the Agreement or this DPA.\u003c/p\u003e\n\u003cp\u003eAll capitalized terms not defined in this DPA shall have the meanings set forth in the Agreement.\u003c/p\u003e\n\u003ch3 id=\"2.-relationships-of-the-parties\" tabindex=\"-1\"\u003e2. Relationships of the Parties\u003c/h3\u003e\n\u003cp\u003e2.1. \u003cstrong\u003eManychat as a Processor.\u003c/strong\u003e The parties acknowledge and agree that with regard to the Processing of Customer Content, Manychat is a Processor acting on behalf of Customer (whether itself a Controller or a Processor). Manychat Processes Customer Content in accordance with Customer’s instructions as set forth in Section 2.4. Manychat shall Process Customer Content only for the purposes described in this DPA and only in accordance with Customer’s instructions.\u003c/p\u003e\n\u003cp\u003e2.2. \u003cstrong\u003eManychat as a Controller.\u003c/strong\u003e The parties acknowledge that, with regard to the Processing of Customer Account Data, Manychat is an independent controller, not a joint controller with Customer. Manychat will Process Customer Account Data as a Controller in order to carry out the necessary functions, such as entering into the agreement, account management, compliance with law, accounting, tax, billing, audit, sales and marketing communication with Customer. Manychat will Process such data in accordance with its Privacy Policy, which can be found at \u003ca href=\"https://manychat.com/legal/privacy\"\u003ewww.manychat.com/legal/privacy\u003c/a\u003e, and with applicable provisions of this DPA.\u003c/p\u003e\n\u003cp\u003e2.3. \u003cstrong\u003eDetails of Data Processing.\u003c/strong\u003e Details of Processing Customer Content and Customer Account Data are set in \u003ca href=\"#annex-1.-details-of-processing\"\u003eAnnex 1\u003c/a\u003e. It further specifies the nature and purpose of the Processing, the duration of the Processing, the types of personal data and categories of data subjects, sources of Personal Data, Processors and Sub-processors engaged by Manychat.\u003c/p\u003e\n\u003cp\u003e2.4. \u003cstrong\u003eCustomer Instructions.\u003c/strong\u003e Manychat will Process Customer Content only in accordance with Customer’s instructions. By entering into the Agreement, including this DPA, Customer instructs Manychat to Process Customer Content in order to provide the Service.\u003c/p\u003e\n\u003cp\u003e2.5. \u003cstrong\u003eCustomer as a Processor.\u003c/strong\u003e If Customer is a processor on behalf of some other Controller, Customer warrants on an ongoing basis that the relevant Controller has authorized (i) the instructions described in DPA and the appointment of Manychat as a sub-processor and (ii) Manychat’s engagement of Sub-processors as described in \u003ca href=\"#3.-sub-processing\"\u003eSection 3\u003c/a\u003e. Customer will immediately forward to the relevant Controller any notice provided by Manychat under this DPA to Customer (on the engagement of a new Sub-processor, Data Breach, request of data subjects, etc.).\u003c/p\u003e\n\u003cp\u003e2.6. \u003cstrong\u003eCompliance with Law.\u003c/strong\u003e Each party will comply with its obligations under its Applicable Data Protection Laws with respect to its Processing of Personal Data.\u003c/p\u003e\n\u003cp\u003e2.7. \u003cstrong\u003eCustomer’s Obligations.\u003c/strong\u003e Customer agrees that it shall comply with its obligations under Customer’s Applicable Data Protection Laws with respect to its Processing of Personal Data and any processing instructions it issues to Manychat. In particular, Customer must provide notice and obtain all consents (or other legal grounds) and rights necessary under Customer’s Applicable Data Protection Laws for (i) engaging Manychat to Process Customer Content on behalf of Customer and (ii) transfer of Customer Account Data to Manychat pursuant to the Agreement and this DPA.\u003c/p\u003e\n\u003cp\u003eCustomer must inform Manychat about any requirements to Processing Customer Content by Manychat which are set under the Customer’s Applicable Data Protection Laws and are not covered directly by this DPA.\u003c/p\u003e\n\u003ch3 id=\"3.-sub-processing\" tabindex=\"-1\"\u003e3. Sub-processing\u003c/h3\u003e\n\u003cp\u003e3.1. \u003cstrong\u003eAuthorized Sub-processors\u003c/strong\u003e. Customer specifically authorizes and agrees that Manychat may engage Sub-processors to Process Customer Content. The Sub-processors currently engaged by Manychat and authorized by Customer are available at \u003ca href=\"https://manychat.com/legal/service-providers\"\u003ewww.manychat.com/legal/service-providers\u003c/a\u003e. Customer also generally authorizes Manychat to engage new Sub-processors to Process Customer Content subject to procedure set in Section 3.3 of DPA.\u003c/p\u003e\n\u003cp\u003e3.2. \u003cstrong\u003eSub-processor Obligations\u003c/strong\u003e. With respect to all Sub-processors Manychat shall:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eenter into a legally binding agreement with the Sub-processor, imposing data protection obligations substantially similar to those set out in this DPA; and\u003c/li\u003e\n\u003cli\u003eremain responsible for the Sub-processor’s compliance with the obligations of this DPA and for any acts or omissions of the Sub-processor that cause Manychat to breach any of its obligations under this DPA.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- end of the list --\u003e\n\u003cp\u003e3.4. \u003cstrong\u003eEngagement of New Sub-processors.\u003c/strong\u003e Manychat will notify Customer about the engagement of any new Sub-processor, if Customer subscribes to receive such updates at \u003ca href=\"https://manychat.com/legal/subscribe-subprocessor-updates\"\u003ewww.manychat.com/legal/subscribe-subprocessor-updates\u003c/a\u003e. Manychat will send such notice at least ten (10) calendar days before the new Sub-processor accesses Customer Content. If Manychat reasonably believes that engaging a new Sub-processor and providing access to Customer Content on an expedited basis is necessary to protect the confidentiality, integrity or availability of the Customer Content or avoid material disruption to the Service, Manychat will give such notice as soon as reasonably practicable.\u003c/p\u003e\n\u003cp\u003e3.4. \u003cstrong\u003eObjection\u003c/strong\u003e. If, within five (5) calendar days after receipt of notice from Manychat, Customer notifies Manychat that Customer objects to Manychat’s appointment of a new Sub-processor based on reasonable data protection concerns, the parties will discuss such concerns in good faith and whether they can be resolved. If the parties are not able to mutually agree to a resolution of such concerns, Customer, as its sole and exclusive remedy, may terminate the Agreement and DPA for convenience with no refunds and Customer will remain liable to pay any committed fees in an order form, order, statement of work or other similar ordering documents.\u003c/p\u003e\n\u003cp\u003eIf Customer does not notify Manychat of objections, within the specified period, Manychat is deemed authorized to engage a new Sub-processor by Customer.\u003c/p\u003e\n\u003ch3 id=\"4.-security-measures\" tabindex=\"-1\"\u003e4. Security Measures\u003c/h3\u003e\n\u003cp\u003e4.1. \u003cstrong\u003eAdequate Measures.\u003c/strong\u003e Manychat will implement and maintain throughout the term of this DPA technical and organizational security measures set forth in \u003ca href=\"#annex-2.-security-measures\"\u003eAnnex 2\u003c/a\u003e (“\u003cstrong\u003eSecurity Measures\u003c/strong\u003e”) to protect Personal Data from Data Breach and to preserve the security and confidentiality of the Personal Data, in accordance with Manychat’s security standards.\u003c/p\u003e\n\u003cp\u003e4.2. \u003cstrong\u003eConfidentiality of Processing\u003c/strong\u003e. Manychat shall ensure that any person who is authorized by Manychat to Process Personal Data (including its staff, agents, subcontractors and Sub-processors) shall be under an appropriate obligation of confidentiality (whether a contractual or statutory duty).\u003c/p\u003e\n\u003cp\u003e4.3. \u003cstrong\u003eCustomer Responsibilities.\u003c/strong\u003e Customer acknowledges and agrees that:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eit has reviewed and assessed the list of Security Measures and deems it appropriate for the protection of Personal Data under Customer’s Applicable Data Protection Laws and provides appropriate safeguards for cross-border transfer of Personal Data, if applicable. Upon a Customer request, Manychat may implement additional measures or safeguards that may be reasonably required to enable the lawful transfer of Personal Data.\u003c/li\u003e\n\u003cli\u003eexcept as provided by this DPA, Customer is responsible for its secure use of the Service, including securing its account authentication credentials and protecting the security of Personal Data when in transit, securing Customer’s systems and devices that it uses for accessing the Service.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- end of the list --\u003e\n\u003cp\u003e4.4. \u003cstrong\u003eUpdates to Security Measures\u003c/strong\u003e. Customer acknowledges that the Security Measures are subject to technical progress and development and that Manychat may update or modify the Security Measures from time to time, provided that such updates and modifications do not result in the degradation of the overall security of the Service purchased by the Customer. Customer is responsible for reviewing the information made available by Manychat relating to updated data security and making an independent determination as to whether the Service meets Customer’s requirements and legal obligations under Customer’s Applicable Data Protection Laws.\u003c/p\u003e\n\u003ch3 id=\"5.-security-reviews-and-reports\" tabindex=\"-1\"\u003e5. Security Reviews and Reports\u003c/h3\u003e\n\u003cp\u003e5.1. \u003cstrong\u003eSecurity Reports.\u003c/strong\u003e Manychat uses external auditors to verify the adequacy of its security measures and obtained ISO 27001 certification for the Service. Such audits are performed at least annually by independent third-party security professionals at Manychat’s selection and result in the generation of a confidential audit report (“\u003cstrong\u003eAudit Report\u003c/strong\u003e”). Upon written request, and subject to reasonable confidentiality controls, Manychat will make available to Customer a summary copy of Manychat’s most recent Audit Report.\u003c/p\u003e\n\u003cp\u003e5.2. \u003cstrong\u003eSecurity Due Diligence\u003c/strong\u003e. In addition to the Audit Report, Manychat will respond to reasonable requests for information sent by Customer to confirm Manychat’s compliance with this DPA, including responses to Customer’s information security and due diligence questionnaires. Customer shall not exercise this right more than once per calendar year.\u003c/p\u003e\n\u003ch3 id=\"6.-data-breach-and-notification\" tabindex=\"-1\"\u003e6. Data Breach and Notification\u003c/h3\u003e\n\u003cp\u003e6.1. \u003cstrong\u003eNotification Timeframe.\u003c/strong\u003e Upon becoming aware of a confirmed Data Breach, Manychat will notify Customer without undue delay and in no event later than 52 hours after the discovery of such incident unless prohibited by applicable law. A delay in giving such notice requested by law enforcement and/or in light of Manychat’s legitimate needs to investigate or remediate the matter before providing notice will not constitute an undue delay.\u003c/p\u003e\n\u003cp\u003e6.2. \u003cstrong\u003eContent of Notification.\u003c/strong\u003e Such notices will describe, to the extent possible, details of the Data Breach, including steps taken to mitigate the potential risks and steps Manychat recommends Customer take to address the Data Breach.\u003c/p\u003e\n\u003cp\u003e6.3. \u003cstrong\u003eCooperation by Manychat.\u003c/strong\u003e Manychat shall cooperate with Customer and take such reasonable commercial steps to assist in the investigation, mitigation and remediation of each such Data Breach. Manychat’s notification of or response to a Data Breach under this section will not be construed as an acknowledgment by Manychat of any fault or liability with respect to the Data Breach.\u003c/p\u003e\n\u003cp\u003e6.4. \u003cstrong\u003eData Breach Notification to Authorities and Data Subjects.\u003c/strong\u003e Customer is solely responsible for fulfilling any third-party notification obligations related to any Data Breach under the Customer’s Applicable Data Protection Laws (e.g. notification to data protection authorities or communication to Data Subjects).\u003c/p\u003e\n\u003ch3 id=\"7.-data-subject-rights-and-cooperation\" tabindex=\"-1\"\u003e7. Data Subject Rights and Cooperation\u003c/h3\u003e\n\u003cp\u003e7.1. \u003cstrong\u003eData Subjects Requests.\u003c/strong\u003e Manychat will upon Customer’s request provide Customer with the assistance that may be reasonably required by Customer to comply with its obligations under Customer’s Applicable Data Protection Laws to respond to Data Subjects’ requests to exercise their rights under Customer’s Applicable Data Protection Laws (e.g., rights of data access, rectification, erasure, restriction, portability and objection), in cases where Customer cannot reasonably fulfill such requests independently by using the self-service functionality of the Service.\u003c/p\u003e\n\u003cp\u003e7.2. \u003cstrong\u003eAuthorization for Direct Requests to Manychat.\u003c/strong\u003e If Manychat receives a request from a Data Subject in relation to Customer Content, (i) for unsubscription of the Data Subject from messages sent by Customer through the Service or (ii) for deletion of Customer Content in the Service with respect to the Data Subject in part or entirely, Customer authorizes and instructs Manychat to unsubscribe or delete Content Data related to such Data Subject.\u003c/p\u003e\n\u003cp\u003e7.3. \u003cstrong\u003eAssistance by Manychat.\u003c/strong\u003e Manychat will provide Customer with reasonable assistance specifically requested by Customer to comply with its obligations under Customer’s Applicable Data Protection Laws, taking into account the nature of processing and the information available to Manychat as a Processor (e.g. with respect to the security of Processing, notification of Data Breach, data protection impact assessment, prior consultations with supervisory authorities). If such reasonable assistance requires Manychat to assign significant resources to that effort, it will be provided at a Customer’s expense.\u003c/p\u003e\n\u003ch3 id=\"8.-return-or-deletion-of-data\" tabindex=\"-1\"\u003e8. Return or Deletion of Data\u003c/h3\u003e\n\u003cp\u003e8.1. Upon receipt of a request by Customer and following the termination of the Agreement, Manychat must delete or return to Customer all Customer Content from Manychat’s systems. Notwithstanding the foregoing, Customer understands that Manychat may have to retain some parts of Customer Content if required by law according to its data retention policies and such data will remain subject to the requirements of this DPA.\u003c/p\u003e\n\u003ch3 id=\"9.-miscellaneous\" tabindex=\"-1\"\u003e9. Miscellaneous\u003c/h3\u003e\n\u003cp\u003e9.1. \u003cstrong\u003eProcessing in the United States.\u003c/strong\u003e Customer acknowledges that provision of the Service and related Manychat’s activities as a Controller may also require processing of Personal Data by Sub-processors or Processors in countries outside the EEA and, including in the United States.\u003c/p\u003e\n\u003cp\u003e9.2. \u003cstrong\u003eWay of Communication.\u003c/strong\u003e Manychat shall send all notifications mentioned in DPA via email provided by Customer during the sign-up process or post them in the user interface of the Service. All objections and requests by Customer mentioned in DPA or other communication related to Processing of Personal Data must be sent by Customer to the same email from which Customer received a Manychat’s notification or to \u003ca href=\"mailto:privacy@manychat.com\"\u003eprivacy@manychat.com\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e9.3. \u003cstrong\u003eClaims.\u003c/strong\u003e Any claims brought under or in connection with this DPA shall be subject to the terms and conditions, including but not limited to the exclusions and limitations, set forth in the Agreement.\u003c/p\u003e\n\u003cp\u003e9.4. \u003cstrong\u003eNo Third-party Beneficiary Rights.\u003c/strong\u003e This DPA does not confer any third-party beneficiary rights, it is intended for the benefit of the parties hereto and their respective permitted successors and assigns only, and is not for the benefit of, nor may any provision hereof be enforced by, any other person.\u003c/p\u003e\n\u003cp\u003e9.5. \u003cstrong\u003eGoverning Law.\u003c/strong\u003e This DPA will be governed by and construed in accordance with governing law and jurisdiction provisions in the Agreement, unless required otherwise by Customer’s Applicable Data Protection Laws or set in Jurisdiction Specific Terms under \u003ca href=\"#annex-3.-international-provisions-and-jurisdiction-specific-terms\"\u003eAnnex 3\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e9.6. \u003cstrong\u003eTermination.\u003c/strong\u003e This Addendum will automatically terminate upon expiration or termination of the Agreement. Termination of DPA is only possible subject to termination of the Agreement.\u003c/p\u003e\n\u003cp\u003e9.7. \u003cstrong\u003eLiability.\u003c/strong\u003e Customer further agrees that any regulatory penalties incurred by Manychat in relation to the Personal Data that arise as a result of, or in connection with, Customer’s failure to comply with its obligations under this DPA or any Customer’s Applicable Data Protection Laws shall count toward and reduce Manychat’s liability under the Agreement as if it were a liability to the Customer under the Agreement. Manychat is liable for any regulatory penalties incurred by Customer or Manychat in relation to the Personal Data that arise as a result of, or in connection with, Manychat’s failure to comply with its obligations under this DPA or Manychat’s Applicable Data Protection Laws.\u003c/p\u003e\n\u003cp\u003eNotwithstanding anything to the contrary in this DPA or in the Agreement (including, without limitation, either party’s indemnification obligations), neither party will be responsible for any fines issued or levied against the other party by a regulatory authority or governmental body in connection with such other party’s violation of its Applicable Data Protection Laws.\u003c/p\u003e\n\u003cp\u003e9.8. \u003cstrong\u003eRelationship with the Agreement\u003c/strong\u003e. This DPA forms an integral part of the Agreement and except as expressly set forth in this DPA, the Agreement remains unchanged and in full force and effect. If there is any conflict between this DPA and the Agreement, this DPA will govern. The parties agree that this DPA shall replace any existing DPA the parties may have previously entered into in connection with the Service.\u003c/p\u003e\n\u003ch2 id=\"annex-1.-details-of-processing\" tabindex=\"-1\"\u003eANNEX 1. Details of Processing\u003c/h2\u003e\n\u003ch3 id=\"1a.-manychat-as-a-processor\" tabindex=\"-1\"\u003e1A. Manychat as a Processor\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003ePurpose and nature of Processing\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eProvision of the Service under the Agreement, including provision of support to the Customer, communicating regarding Customer Account (sending announcements, technical notices, updates, security alerts, and support and administrative messages) and responding to Service-related requests, questions and feedback, logging of activities, errors and incidents tracking, bugs and errors fixing, ensuring the accessibility, security and usability of the Service and its improvement in the interest of Customer.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003ePeriod for which the personal data will be retained\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eUntil the termination or expiration of the Agreement in accordance with its terms.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eCategories of data subjects\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003e- End Users\u003cbr /\u003e- Customer’s Subscribers\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eCategories of personal data\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eEnd Users: identification information (name, email), publicly available social media profile information, linked pages and accounts, IT information (IP addresses, geographic location, usage data, cookies data, browser data), financial information (credit card details, account details, payment information).\u003cbr /\u003eCustomer’s Subscribers:\u003cbr /\u003e- identification information, publicly available social media profile information (photo, name, date of birth, gender, geographic location),\u003cbr /\u003e -chat history and content, chatbot usage information and other electronic data submitted, stored, sent, or received by End Users and other personal information, the extent of which is determined and controlled by the Customer in its sole discretion,\u003cbr /\u003e- IT information (IP addresses, geographic location, usage data, cookies data, browser data).\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eSensitive data\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eNo. Other types of Personal Data are also not used to indirectly reveal information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eThe frequency of the transfer\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eOn a continuous basis until it is deleted in accordance with the Agreement and DPA terms.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eData source\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eCustomers (or End Users) sign-up process and use of the Service by Customer (End User), including communication with subscribers and third-party integrations and apps linked by Customer (e.g. Facebook, Inc., Instagram, Telegram, Zapier and other integrations and apps specified at \u003ca href=\"https://apps.manychat.com/\"\u003ewww.apps.manychat.com/\u003c/a\u003e which are linked by Customer to its account in the Service).\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eOnward transfer\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eSee the list of Sub-processors at \u003ca href=\"https://manychat.com/legal/service-providers\"\u003ewww.manychat.com/legal/service-providers\u003c/a\u003e.\u003cbr /\u003eThe duration of sub-processing is limited to the retention period of Processing by Manychat specified in this table.\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3 id=\"1b.-manychat-as-a-controller\" tabindex=\"-1\"\u003e1B. Manychat as a Controller\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003ePurpose and nature of Processing\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eEntering into the Agreement, account management, compliance with laws, including sanction laws, accounting, tax, billing, audit, sales and marketing communication with Customer.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003ePeriod for which the personal data will be retained\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eUntil the termination of the Agreement, unsubscription from marketing communications and expiration of retention period required by law.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eCategories of data subjects\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003e- Customer and its representatives\u003cbr /\u003e- End Users\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eCategories of personal data\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eCustomer and its representatives: full name, title, company, email.\u003cbr /\u003eEnd Users: identification information (id, name, email, status), linked pages and accounts, products in use, IT information (IP addresses, geographic location), financial information (credit card details, account details, payment information).\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eSensitive data\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eOther types of Personal Data are also not used to indirectly reveal information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eThe frequency of the transfer\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eOn a continuous basis until it is deleted in accordance with the Agreement and DPA terms.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eData source\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eCustomers sign up process and use of the Service by Customer.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eOnward transfer\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eSee the list of Service Providers at \u003ca href=\"https://manychat.com/legal/service-providers\"\u003ewww.manychat.com/legal/service-providers\u003c/a\u003e.\u003cbr /\u003eWe may also disclose Personal Information to public authorities, such as law enforcement, if we are legally required to do so.\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch2 id=\"annex-2.-security-measures\" tabindex=\"-1\"\u003eANNEX 2. Security Measures\u003c/h2\u003e\n\u003cp\u003eManychat implements and maintains technical and organizational security measures designed to protect Personal Data from Data Breaches. We currently observe the Security Measures described in this Annex 2. If applicable, this Annex 2 serves as Annex II to the EU Standard Contractual Clauses.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e1. Security Program and Policies\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e1.1. Manychat maintains and enforces a risk-based security program and framework that addresses how we manage security. Manychat’s security framework is based on the ISO 27001 Information Security Management System and includes the following areas: Policies and Procedures, Asset Management, Access Management, Cryptography, Physical Security, Operations Security, Communications Security, Business Continuity Disaster Recovery Security, People Security, Product Security, Cloud and Network Infrastructure Security, Security Compliance, Third-Party Security, Vulnerability Management, and Security Monitoring and Incident Response.\u003c/p\u003e\n\u003cp\u003e1.2. Our security program includes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003edocumented policies that we approve, publish and communicate to appropriate personnel internally and review at least annually,\u003c/li\u003e\n\u003cli\u003edocumented, clear assignment of responsibility and authority for security program activities,\u003c/li\u003e\n\u003cli\u003eregular testing of the key controls, systems and procedures.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e2. Risk and Asset Management\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e2.1. Manychat utilizes an integrated risk management approach with a focus on both technical and operational security practices. Ongoing and systematic risk assessment is a consistent part of selecting appropriate improvement protection controls and ensuring that Personal Data is safe.\u003c/p\u003e\n\u003cp\u003e2.2. Manychat takes reasonable actions to identify assets and their level of criticality. The full inventory and categorization are the basis to select and implement optimal technical and organizational security measures to make sure that the assets and information are protected.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e3. Personnel security and awareness\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e3.1. Manychat’s personnel (employees and contractors) do not process Personal Data without authorization. Personnel is obligated to maintain the confidentiality of any Personal Data and this obligation continues even after their engagement ends.\u003c/p\u003e\n\u003cp\u003e3.2. Manychat’s personnel (employees and contractors) acknowledge their data security and privacy responsibilities under Manychat’s policies.\u003c/p\u003e\n\u003cp\u003e3.3. Manychat is focused on employee security awareness as a key driver to improve overall security maturity level and culture. Manychat’s personnel (employees and contractors) conduct security and privacy training at least annually.\u003c/p\u003e\n\u003cp\u003e3.4. Pre-employment verification checks are carried out on all new employees and contractors.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e4. Access Management\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e4.1. Manychat manages access based on “Need to know” and “Least privilege” principles. That means that personnel is only permitted to have access to Personal Data when needed for the performance of their functions.\u003c/p\u003e\n\u003cp\u003e4.2. Manychat deactivates the authentication credentials of personnel immediately upon the termination of their employment or services.\u003c/p\u003e\n\u003cp\u003e4.3. In order to access the production environment and critical systems, a user must have a unique username and password and multi-factor authentication enabled.\u003c/p\u003e\n\u003cp\u003e4.4. Manychat implements measures to prevent information systems from being used by unauthorized persons, including the following measures (a) user identification and authentication procedures; (b) unique username/password (c) password complexity policies (special characters, minimum length, change of password) (c) automatic blocking (e.g., password or timeout).\u003c/p\u003e\n\u003cp\u003e4.5. Manychat performs access monitoring and logging for the production environment and critical systems.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e5. Technical and Application Security Measures\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e5.1. Manychat has implemented and will maintain appropriate technical and application security measures, internal controls, and information security routines intended to protect Personal Data against accidental loss, destruction, or alteration; unauthorized disclosure or access; or unlawful destruction as follows:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eSegregation of environments\u003c/strong\u003e. Manychat segregates development and production environments to make sure that Personal Data is protected from any kind of unauthorized access.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eEncryption in transit.\u003c/strong\u003e All external network communications are protected with encryption. We support the latest recommended secure cipher suites to encrypt all traffic in transit, including the use of TLS 1.2 protocols, AES256 encryption, and SHA2 hash functions, whenever supported by the clients.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eEncryption at rest.\u003c/strong\u003e Customer data at rest is encrypted using FIPS 140-2 compliant encryption standards, which applies to all types of data at rest within Manychat’s systems—relational databases, file drives, backups, etc. Access to cryptographic keys is restricted to a limited number of authorized Manychat personnel.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRedundancy\u003c/strong\u003e. Manychat selects IT Infrastructure suppliers that are committed to provide mechanisms with built-in security best practices for confidentiality, integrity, and availability. Manychat’s main IaaS provider AWS (Frankfurt, EU) is committed to meet the strict Disaster Recovery (DR) Service Level Agreement.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVulnerability assessment\u003c/strong\u003e. Manychat performs automated and manual application and infrastructure security testing to identify and patch potential security vulnerabilities. Critical software patches are evaluated, tested, and applied proactively.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePenetration Testing\u003c/strong\u003e. We engage independent service providers to perform penetration tests to assess the potential system security threats at least on an annual basis.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSoftware Development and Acquisition\u003c/strong\u003e. Manychat follows security-by-design principles across different phases of the Service creation lifecycle from requirements gathering and product design all the way through product deployment. For the software developed by Manychat, Manychat follows secure coding standards and procedures set out in its standard operating procedures.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStorage.\u003c/strong\u003e Manychat’s production databases and data processing servers are hosted in a data center located in AWS (Frankfurt, EU). Manychat maintains complete administrative control over the databases and virtual servers, and no third-party vendors have logical access to Personal Data.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eChange Management.\u003c/strong\u003e Manychat implements documented change management procedures that provide a consistent approach for controlling, implementing, and documenting changes (including emergency changes) for Manychat’s software, information systems or network architecture.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eNetwork security.\u003c/strong\u003e All network access between servers is restricted, using access control lists to allow only authorized services to interact in the network. We utilize third-party tools to detect, mitigate, and prevent Distributed Denial of Service (DDoS) attacks.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e6. Third-Party Provider Management\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e6.1. Manychat may use third-party providers to provide the Services. In selecting third-party providers who may gain access to, store, transmit or use Personal Data, Manychat conducts a quality and security assessment pursuant to the provisions of its standard operating procedures.\u003c/p\u003e\n\u003cp\u003e6.2. Manychat enters into written agreements with all of its providers which include confidentiality, privacy, and security obligations that provide an appropriate level of protection for Personal Data that these providers may Process.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e7. Physical and Environmental Security\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e7.1. Manychat uses AWS data centers to host its production infrastructure. AWS data centers are strictly controlled both at the perimeter and at building ingress points by professional security staff utilizing video surveillance, intrusion detection systems, and other electronic means. Each data center has redundant electrical power systems that are available twenty-four (24) hours a day, seven (7) days a week.\u003c/p\u003e\n\u003cp\u003e7.2. Manychat offices have a physical security program that manages visitors, building entrances, video surveillance, and overall office security. All employees, contractors, and visitors are required to wear identification badges.\u003c/p\u003e\n\u003cp\u003e7.3. Manychat reviews third-party audit reports to verify that Manychat’s service providers maintain appropriate physical access controls for the managed data centers.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e8. Resilience and Service Continuity\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e8.1. Manychat implements measures to ensure the ability to restore the availability and access to Personal Data in a timely manner in the event of a physical or technical incident, including:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eOngoing Personal Data backup procedures. Backups are retained redundantly across multiple availability zones and encrypted in transit and at rest.\u003c/li\u003e\n\u003cli\u003eManychat uses specialized tools to monitor the Service performance. The alert is triggered in the event of any suboptimal server performance or overloaded capacity.\u003c/li\u003e\n\u003cli\u003eDisaster recovery plans are in place to recover in case of Personal Data availability issues.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e9. Security Certifications and Attestations.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e9.1. Manychat holds the following security-related certifications and attestations:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eISO 27001 Certification.\u003c/strong\u003e The International Organization for Standardization 27001 Standard (ISO 27001) is an information security standard that ensures office sites, development centers, support centers, and data centers are securely managed. This certification is valid for 3 years (renewal audits) and is subject to annual touchpoint audits (surveillance audits).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eSOC 2 Type 2 report.\u003c/strong\u003e The SOC 2 Type 2 report, part of the Service Organization Control (SOC) framework from the American Institute of Certified Public Accountants (AICPA), evaluates the effectiveness of a service organization's controls over time, focusing on security, availability, and confidentiality. SOC 2 Type 2 report examines operational effectiveness over a period. It provides assurance on the consistent application of controls, crucial for client and stakeholder trust. This report requires annual renewal to maintain ongoing compliance.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003e10. Information Security Incident Management\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e10.1. Manychat implements security incident management policies and procedures that address how we manage Data Breach and other security incidents.\u003c/p\u003e\n\u003cp\u003e10.2. In case of Data Breach Manychat will promptly investigate the incident upon discovery. To the extent permitted by applicable law, Manychat will notify Customer of a Data Breach. Data Breach incident notifications will be provided to Customers via email or in the other way agreed with Customer.\u003c/p\u003e\n\u003ch2 id=\"annex-3.-international-provisions-and-jurisdiction-specific-terms\" tabindex=\"-1\"\u003eANNEX 3. International Provisions and Jurisdiction Specific Terms\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e1. California\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIf the Customer’s Applicable Data Protection Laws include the California Consumer Privacy Act (“\u003cstrong\u003eCCPA\u003c/strong\u003e”) the following provisions apply. The terms “business”, “commercial purpose”, “service provider”, “sell” and “personal information” have the meanings given in the CCPA. With respect to Customer Content, Manychat is a service provider under the CCPA.\u003c/p\u003e\n\u003cp\u003eManychat will not (i) sell Customer Data; (ii) retain, use or disclose any Customer Data for any purpose other than for the specific purpose of providing the Service, including retaining, using or disclosing the Customer Content for a commercial purpose other than providing the Service; or (iii) retain, use or disclose the Customer Content outside of the direct business relationship between Manychat and Customer.\u003c/p\u003e\n\u003cp\u003eThe parties acknowledge and agree that the Processing of Customer Content authorized by Customer’s instructions described in \u003ca href=\"#2.-relationships-of-the-parties\"\u003eSection 2.4\u003c/a\u003e of DPA is integral to and encompassed by Manychat’s provision of the Service and the direct business relationship between the parties.\u003c/p\u003e\n\u003cp\u003eNotwithstanding anything in the Agreement, the parties acknowledge and agree that Manychat’s access to Customer Content does not constitute part of the consideration exchanged by the parties in respect of the Agreement.\u003c/p\u003e\n\u003cp\u003eNotwithstanding any use restriction contained elsewhere in this section, Manychat may de-identify or aggregate Customer Content as part of performing the Service specified in this DPA and the Agreement.\u003c/p\u003e\n\u003cp\u003eWhere Sub-processors Process Personal Data, Manychat takes steps to ensure that such Sub-processors are Service Providers under the CCPA with whom Manychat has entered into a written contract that includes terms substantially similar to this “California” section or are otherwise exempt from the CCPA’s definition of “sale”. Manychat conducts appropriate due diligence on its Sub-processors.\u003c/p\u003e\n\u003cp\u003eWith respect to Customer Account Data Manychat is the business with respect to such data and will Process such data in accordance with its Privacy Policy, which can be found at \u003ca href=\"https://manychat.com/legal/privacy\"\u003ewww.manychat.com/legal/privacy\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003e2. European Economic Area, Switzerland and the United Kingdom.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eIf the Customer’s Applicable Data Protection Laws include the General Data Protection Regulation (EU 2016/679) (“\u003cstrong\u003eGDPR\u003c/strong\u003e”), the Swiss Federal Act on Data Protection (“\u003cstrong\u003eFADP\u003c/strong\u003e”), or corresponding laws of the United Kingdom (including the UK GDPR and Data Protection Act 2018) (“\u003cstrong\u003eUK GDPR\u003c/strong\u003e”) the following provisions apply.\u003c/p\u003e\n\u003cp\u003eTo the extent Manychat processes Customer Personal Data originating from the EEA, United Kingdom, or Switzerland, Manychat represents that the transfer of personal data will be subject to the Data Privacy Framework (DPF) and will adhere to the DPF Principles.\u003c/p\u003e\n\u003cp\u003eTo the extent that Customer is (a) located in the United States of America and is self-certified under the Data Privacy Framework or (b) located in the EEA, UK or Switzerland, Manychat further agrees:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eto provide at least the same level of protection to any personal data as required by the Data Privacy Principles;\u003c/li\u003e\n\u003cli\u003eto notify Customer in writing, without undue delay, if its self-certification to the Data Privacy Framework is withdrawn, terminated, revoked, or otherwise invalidated; and\u003c/li\u003e\n\u003cli\u003eupon written notice, to work with Customer to take reasonable and appropriate steps to stop and remediate any unauthorized processing of personal data.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eIn the event that the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF do not apply, Manychat relies on other data transfer mechanisms to transfer personal data outside the EEA, the UK, and Switzerland, such as Standard Contractual Clauses (SCC).\u003c/p\u003e\n\u003cp\u003eIn the event that the Standard Contractual Clauses regulate the transfer of Personal Data to Manychat, the following clauses apply:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003e\n\u003cp\u003efor transfers of Personal Data \u003cstrong\u003esubject to GDPR\u003c/strong\u003e the parties apply Standard Contractual Clauses approved under the Commission Implementing Decision (EU) 2021/914 of 4 June 2021 published at \u003ca href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914\u0026amp;from=en\"\u003ehttps://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914\u0026amp;from=en\u003c/a\u003e (“\u003cstrong\u003eEU SCCs\u003c/strong\u003e”):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003efor Customer Content: Module Two (Controller to Processor) or Module Three (Processor to Processor) depending on the status of Customer with respect to Customer Content.\u003c/li\u003e\n\u003cli\u003efor Customer Account Data (e.g. if Customer transfers to Manychat data of its End Users or representatives): Module One (Controller to Controller).\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFor each Module of EU SCCs, the following provisions apply, where applicable:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ein Clause 7 of EU SCCs, the optional docking clause will not apply;\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003ein Clause 9 of EU SCCs, Option 2 will apply and the time period for prior written notice of sub-processor changes will be as set forth in Section 3.3 of DPA (Engagement of New Sub-processors);\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003ein Clause 11 of EU SCCs, the optional part on lodge of a complaint with an independent dispute resolution body will not apply;\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003ein Clause 17 (Option 1) of EU SCCs will be governed by the law of Germany;\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003ein Clause 18(b) of EU SCCs, disputes will be resolved before the courts of Germany;\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efor Annex I, Part A of EU SCCs, the List of Parties is the following:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eActivities relevant to the data transferred under EU SCCs: The data importer provides the Service to the data exporter in accordance with the Agreement (\u003ca href=\"https://manychat.com/legal/tos\"\u003eTerms of Service\u003c/a\u003e and \u003ca href=\"https://manychat.com/legal/dpa\"\u003eData Processing Addendum\u003c/a\u003e);\u003c/li\u003e\n\u003cli\u003eSignature and date: The Parties agree that acceptance of the Terms of Service by Customer as specified in the Terms of Service, shall constitute execution of EU SCCs by both parties;\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eData exporter(s)\u003c/strong\u003e name, address: The Customer, as defined under the DPA, the Customer's address;\u003c/li\u003e\n\u003cli\u003eContact person’s name, position and contact details: Contact details for the data exporter are specified in the Terms of Service and, if not, are available to the data importer in the admin console of the Service (where such details have been provided by the data exporter);\u003c/li\u003e\n\u003cli\u003eRole: for Module One (transfer of Customer Account Data): controller; for Module Two (transfer of Customer Content): controller; for Module Three (transfer of Customer Content): processor;\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eData importer(s)\u003c/strong\u003e name, address: MANYCHAT, INC., 2301 W Anderson Ln #102-105, Austin, TX 78757;\u003c/li\u003e\n\u003cli\u003eContact person’s name, position and contact details: Rickert Rechtsanwaltsgesellschaft mbH (Representative in the EU) email: \u003ca href=\"mailto:art-27-rep-manychat@rickert.law\"\u003eart-27-rep-manychat@rickert.law\u003c/a\u003e;\u003c/li\u003e\n\u003cli\u003eRole: for Module One (transfer of Customer Account Data): controller; for Module Two and Module Three (transfer of Customer Content): processor;\u003c/li\u003e\n\u003cli\u003efor Annex I, Part B of EU SCCs, the Description of transfer is specified in \u003ca href=\"#annex-1.-details-of-processing\"\u003eAnnex 1A to DPA\u003c/a\u003e for Customer Content and in \u003ca href=\"#1b.-manychat-as-a-controller\"\u003eAnnex 1B to DPA\u003c/a\u003e for Customer Account Data transfer.\u003c/li\u003e\n\u003cli\u003efor Annex I, Part C of EU SCCs, the Customer's competent supervisory will be determined in accordance with the GDPR and Clause 13 of EU SCCs.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efor Annex II of EU SCCs, the list of technical and organizational measures, including measures to ensure the security of the data are specified in \u003ca href=\"#annex-2.-security-measures\"\u003eAnnex 2 to DPA\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efor Annex III of EU SCCs, the list of sub-processors (for transfer of Customer Content under Module Two and Module Three) which the controller has authorized is specified at \u003ca href=\"https://manychat.com/legal/service-providers\"\u003ewww.manychat.com/legal/service-providers\u003c/a\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efor transfers of Personal Data \u003cstrong\u003esubject to FADP\u003c/strong\u003e the parties apply EU SCCs as specified above with respect to Customer Content and Customer Account Data with the following modifications:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ereferences to \u0026quot;Regulation (EU) 2016/679\u0026quot; will be interpreted as references to the FADP;\u003c/li\u003e\n\u003cli\u003ereferences to \u0026quot;EU law\u0026quot;, \u0026quot;Union law\u0026quot; and \u0026quot;Member State law\u0026quot; will be interpreted as references to Swiss law;\u003c/li\u003e\n\u003cli\u003ereferences to \u0026quot;EU\u0026quot;, \u0026quot;Union\u0026quot; and \u0026quot;Member State\u0026quot; will be interpreted as references to Switzerland, and in particular, Clause 18 of EU SCCs must be interpreted as entitling data subjects to exercise their rights at their place of habitual residence in Switzerland;\u003c/li\u003e\n\u003cli\u003ereferences to the \u0026quot;competent supervisory authority\u0026quot; and \u0026quot;competent courts\u0026quot; will be replaced with the \u0026quot;the Swiss Federal Data Protection and Information Commissioner\u0026quot; and the \u0026quot;relevant courts in Switzerland\u0026quot;.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efor transfers of Personal Data \u003cstrong\u003esubject to UK GDPR\u003c/strong\u003e the parties apply EU SCCs as specified above with respect to Customer Content and Customer Account Data, together with the International data transfer addendum to the European Commission’s standard contractual clauses for international data transfers (Adopted by ICO, Version B1.0, in force 21 March 2022) published at \u003ca href=\"https://ico.org.uk/media/for-organisations/documents/4019539/international-data-transfer-addendum.pdf\"\u003ehttps://ico.org.uk/media/for-organisations/documents/4019539/international-data-transfer-addendum.pdf\u003c/a\u003e as follows:\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch3 id=\"part-1%3A-tables\" tabindex=\"-1\"\u003ePart 1: Tables\u003c/h3\u003e\n\u003ch4 id=\"table-1%3A-parties\" tabindex=\"-1\"\u003eTable 1: Parties\u003c/h4\u003e\n\u003ctable\u003e\n \u003ccolgroup\u003e\n \u003ccol span=\"1\" style=\"width: 20%\"\u003e\n \u003ccol span=\"1\" style=\"width: 40%\"\u003e\n \u003ccol span=\"1\" style=\"width: 40%\"\u003e\n \u003c/colgroup\u003e\n \u003cthead\u003e\n \u003ctr\u003e\n \u003cth\u003e\u003c/th\u003e\n \u003cth colspan=\"2\"\u003e\u003c/th\u003e\n \u003c/tr\u003e\n \u003c/thead\u003e\n \u003ctbody\u003e\n \u003ctr\u003e\n \u003ctd\u003e\u003cb\u003eStart date\u003c/b\u003e\u003c/td\u003e\n \u003ctd colspan=\"2\"\u003eEffective date of the Terms of Service and Data Processing Addendum.\u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\u003cb\u003eThe Parties\u003c/b\u003e\u003c/td\u003e\n \u003ctd\u003e\u003cb\u003eExporter (who sends the Restricted Transfer)\u003c/b\u003e\u003c/td\u003e\n \u003ctd\u003e\u003cb\u003eImporter (who receives the Restricted Transfer)\u003c/b\u003e\u003c/td\u003e\n \u003c/tr\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\u003cb\u003eParties’ details\u003c/b\u003e\u003c/td\u003e\n \u003ctd\u003eFull legal name: MANYCHAT INC.\u003cbr /\u003eTrading name (if different): n/a\u003cbr /\u003eMain address (if a company registered address): 2301 W Anderson Ln #102-105, Austin, TX 78757\u003cbr /\u003eOfficial registration number (if any) (company number or similar identifier): 81-1410171\n \u003c/td\u003e\n \u003ctd\u003eFull legal name: Customer (as set forth in the Terms of Service)\u003cbr /\u003eTrading name (if different):\u003cbr /\u003eMain address (if a company registered address): as set forth in the Terms of Service\u003cbr /\u003eOfficial registration number (if any) (company number or similar identifier):\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\u003cb\u003eKey Contact\u003c/b\u003e\u003c/td\u003e\n \u003ctd\u003eFull Name (optional): Rickert Rechtsanwaltsgesellschaft m.b.H\u003cbr /\u003eJob Title: Representative in the EU\u003cbr /\u003eContact details including email:\u003cbr /\u003e\u003ca href=\"mailto:art-27-rep-manychat@rickert.law\"\u003eart-27-rep-manychat@rickert.law\u003c/a\u003e\n \u003c/td\u003e\n \u003ctd\u003eFull Name (optional):\u003cbr /\u003eJob Title: as set forth in the Terms of Service\u003cbr /\u003eContact details including email: as set forth in the Terms of Service\n \u003c/td\u003e\n \u003c/tr\u003e\n \u003ctr\u003e\n \u003ctd\u003e\u003cb\u003eSignature (if required for the purposes of Section 2)\u003c/b\u003e\u003c/td\u003e\n \u003ctd\u003e\u003c/td\u003e\n \u003ctd\u003e\u003c/td\u003e\n \u003c/tr\u003e\n \u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch4 id=\"table-2%3A-selected-sccs%2C-modules-and-selected-clauses\" tabindex=\"-1\"\u003eTable 2: Selected SCCs, Modules and Selected Clauses\u003c/h4\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eAddendum EU SCCs\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003e☑ The version of the Approved EU SCCs which this Addendum is appended to, detailed below, including the Appendix Information:\u003cbr /\u003eEU SCCs as specified in Section 2A of this Annex 3:\u003cbr /\u003e- For Customer Content (Module Two: Transfer controller to processor, Module Three: Transfer processor to processor)\u003cbr /\u003e- For Customer Account Data (Module One: Transfer controller to controller)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch4 id=\"table-3%3A-appendix-information\" tabindex=\"-1\"\u003eTable 3: Appendix Information\u003c/h4\u003e\n\u003cp\u003e“\u003cstrong\u003eAppendix Information\u003c/strong\u003e” means the information which must be provided for the selected modules as set out in the Appendix of the Approved EU SCCs (other than the Parties), and which for this Addendum is set out in:\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eAnnex 1A: List of Parties: see Section 2A of this Annex 3.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eAnnex 1B: Description of Transfer: see \u003ca href=\"#annex-1.-details-of-processing\"\u003eAnnex 1 to DPA\u003c/a\u003e.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eAnnex II: Technical and organisational measures including technical and organisational measures to ensure the security of the data: see \u003ca href=\"https://manychat.com/legal/dpa\"\u003ewww.manychat.com/legal/dpa\u003c/a\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eAnnex III: List of Sub processors (Modules 2 and 3 only): see the list of Sub-processors at \u003ca href=\"https://manychat.com/legal/service-providers\"\u003ewww.manychat.com/legal/service-providers\u003c/a\u003e.\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch4 id=\"table-4%3A-ending-this-addendum-when-the-approved-addendum-changes\" tabindex=\"-1\"\u003eTable 4: Ending this Addendum when the Approved Addendum Changes\u003c/h4\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eEnding this Addendum when the Approved Addendum changes\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003eWhich Parties may end this Addendum as set out in Section 19:\u003cbr /\u003e☑ Importer\u003cbr /\u003e☑ Exporter\u003cbr /\u003e☐ neither Party\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003ch3 id=\"alternative-part-2-mandatory-clauses%3A\" tabindex=\"-1\"\u003eAlternative Part 2 Mandatory Clauses:\u003c/h3\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003cth\u003e\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003cstrong\u003eMandatory Clauses\u003c/strong\u003e\u003c/td\u003e\n\u003ctd\u003ePart 2: Mandatory Clauses of the Approved Addendum, being the template Addendum B.1.0 issued by the ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section 18 of those Mandatory Clauses.\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n"])</script><script>self.__next_f.push([1,"d:[[\"$\",\"$L1f\",null,{\"experimentName\":\"none\",\"group\":\"16\",\"id\":\"6e3f255e-983b-437f-aee4-35c533b50102\",\"isPreview\":null,\"csrfToken\":\"NTljYzNlOGQ3MzE0ZTFmZGM5ZTcuMTc0MjIxNDA2NzEwMg==\"}],[\"$\",\"$L20\",null,{\"file\":{\"attributes\":{\"title\":\"Data Processing Addendum\",\"date\":\"2024-09-16\",\"previousVersionLink\":\"/legal/dpa-01052023\"},\"html\":\"$21\"},\"slug\":\"dpa\"}]]\n"])</script><script>self.__next_f.push([1,"1c:[[\"$\",\"meta\",\"0\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1, maximum-scale=5\"}],[\"$\",\"meta\",\"1\",{\"charSet\":\"utf-8\"}],[\"$\",\"title\",\"2\",{\"children\":\"Data Processing Addendum | Manychat\"}],[\"$\",\"meta\",\"3\",{\"name\":\"description\",\"content\":\"Learn how to grow your business through marketing tools, tactics, and strategies\"}],[\"$\",\"link\",\"4\",{\"rel\":\"manifest\",\"href\":\"/manifest.json\",\"crossOrigin\":\"use-credentials\"}],[\"$\",\"meta\",\"5\",{\"name\":\"keywords\",\"content\":\"Instagram, Direct Messages, DM, Automation, Facebook, Messenger, Bot, Message, Chat, Marketing, Conversations, SMS\"}],[\"$\",\"meta\",\"6\",{\"name\":\"robots\",\"content\":\"index, follow, max-video-preview:-1, max-image-preview:large, max-snippet:-1\"}],[\"$\",\"link\",\"7\",{\"rel\":\"canonical\",\"href\":\"https://manychat.com/legal/dpa\"}],[\"$\",\"link\",\"8\",{\"rel\":\"alternate\",\"hrefLang\":\"x-default\",\"href\":\"https://manychat.com/legal/dpa\"}],[\"$\",\"link\",\"9\",{\"rel\":\"alternate\",\"hrefLang\":\"es\",\"href\":\"https://manychat.com/es/legal/dpa\"}],[\"$\",\"link\",\"10\",{\"rel\":\"alternate\",\"hrefLang\":\"pt\",\"href\":\"https://manychat.com/pt/legal/dpa\"}],[\"$\",\"meta\",\"11\",{\"property\":\"og:title\",\"content\":\"Data Processing Addendum | Manychat\"}],[\"$\",\"meta\",\"12\",{\"property\":\"og:description\",\"content\":\"Learn how to grow your business through marketing tools, tactics, and strategies\"}],[\"$\",\"meta\",\"13\",{\"property\":\"og:url\",\"content\":\"https://manychat.com/legal/dpa\"}],[\"$\",\"meta\",\"14\",{\"property\":\"og:site_name\",\"content\":\"manychat.com\"}],[\"$\",\"meta\",\"15\",{\"property\":\"og:locale\",\"content\":\"en_US\"}],[\"$\",\"meta\",\"16\",{\"property\":\"og:image\",\"content\":\"https://mccdn.me/martcdn/next-lp/pages/legal/[slug]/og-image.png\"}],[\"$\",\"meta\",\"17\",{\"property\":\"og:image:width\",\"content\":\"1200\"}],[\"$\",\"meta\",\"18\",{\"property\":\"og:image:height\",\"content\":\"630\"}],[\"$\",\"meta\",\"19\",{\"property\":\"og:image:alt\",\"content\":\"Chat Marketing with Manychat\"}],[\"$\",\"meta\",\"20\",{\"property\":\"og:type\",\"content\":\"website\"}],[\"$\",\"meta\",\"21\",{\"name\":\"twitter:card\",\"content\":\"summary_large_image\"}],[\"$\",\"meta\",\"22\",{\"name\":\"twitter:title\",\"content\":\"Data Processing Addendum | Manychat\"}],[\"$\",\"meta\",\"23\",{\"name\":\"twitter:description\",\"content\":\"Learn how to grow your business through marketing tools, tactics, and strategies\"}],[\"$\",\"meta\",\"24\",{\"name\":\"twitter:image\",\"content\":\"https://mccdn.me/martcdn/next-lp/pages/legal/[slug]/og-image.png\"}],[\"$\",\"meta\",\"25\",{\"name\":\"twitter:image:alt\",\"content\":\"Chat Marketing with Manychat\"}],[\"$\",\"link\",\"26\",{\"rel\":\"icon\",\"href\":\"https://manychat.com/landing-static/favicon.svg\",\"type\":\"image/svg+xml\"}],[\"$\",\"link\",\"27\",{\"rel\":\"apple-touch-icon\",\"href\":\"https://manychat.com/landing-static/1024.png\"}],[\"$\",\"link\",\"28\",{\"rel\":\"apple-touch-icon\",\"href\":\"https://manychat.com/landing-static/76.png\",\"sizes\":\"76x76\"}],[\"$\",\"link\",\"29\",{\"rel\":\"apple-touch-icon\",\"href\":\"https://manychat.com/landing-static/120.png\",\"sizes\":\"120x120\"}],[\"$\",\"link\",\"30\",{\"rel\":\"apple-touch-icon\",\"href\":\"https://manychat.com/landing-static/152.png\",\"sizes\":\"152x152\"}],[\"$\",\"link\",\"31\",{\"rel\":\"apple-touch-icon\",\"href\":\"https://manychat.com/landing-static/180.png\",\"sizes\":\"180x180\"}],[\"$\",\"link\",\"32\",{\"rel\":\"image_src\",\"href\":\"https://mccdn.me/martcdn/next-lp/pages/legal/[slug]/og-image.png\"}],[\"$\",\"link\",\"33\",{\"rel\":\"alternative icon\",\"href\":\"https://manychat.com/landing-static/favicon.png\",\"type\":\"image/png\"}]]\n"])</script><script>self.__next_f.push([1,"c:null\n"])</script></body></html>