Data Processing Agreement (DPA) / 데이터 처리 계약

1. Introduction & Scope

This Data Processing Agreement ("DPA") governs the processing of personal data by Nativify on behalf of the customer in compliance with GDPR Article 28 and relevant international data protection laws. This DPA is integrated into Nativify's Terms & Conditions.

2. Roles and Responsibilities

For the purposes of this DPA, the customer acts as the Data Controller (defining processing purposes), and Nativify acts as the Data Processor (carrying out processing commands strictly according to Controller instructions via the build console).

3. Details of Processing

• Subject Matter: Compiling, building, signing, and managing mobile application wrappers.
• Categories of Data: User account emails, website configuration URLs, system device tokens (FCM/APNS), and temporary build server logs.
• Duration: Active subscription or account lifetime; data is purged upon account termination.

4. Technical and Organizational Security

Nativify implements strict technical and organizational safeguards to ensure confidentiality, integrity, and availability of processed data, including encrypting access tokens at rest, network firewalls, and Supabase Row Level Security constraints.