Data Processing Addendum

When you use 1SocialSnap to schedule, automate, and publish content across connected social platforms, the roles under data protection regulations (such as GDPR Article 28) are defined as follows:

In order to provide our social media publishing, queueing, AI generation, and analytics features, 1SocialSnap processes the following data categories:

• •Account Identity: User profile names, email addresses, workspace roles, and authentication hashes.
• •OAuth Access Tokens: Encrypted authorization keys for Meta/Facebook, Instagram, X (Twitter), LinkedIn, YouTube, and TikTok.
• •Published Content & Media: Post drafts, scheduled messages, images, videos, captions, and hashtag metadata.
• •Social Analytics Data: Post engagement rates, impressions, reach, click-through rates, and public follower metrics.

1SocialSnap integrates with third-party social APIs through official OAuth workflows. We enforce strict data handling principles for platform data:

AarMarks Media Pvt. Ltd. engages vetted sub-processors for cloud hosting, database management, email delivery, and payment processing:

• •Cloud Hosting & Object Storage: Secure AWS / cloud data centers for backend execution and media storage.
• •Database Infrastructure: MongoDB Atlas with automated encryption at rest and access control.
• •Transactional Email Delivery: Secure SMTP relay services for system notices, alerts, and report delivery.
• •Payment Processing: PCI-DSS compliant payment gateways (Razorpay / Stripe) for subscription billing.

We implement comprehensive Technical and Organizational Measures ("TOMs") to protect personal data against unauthorized access, loss, or alteration:

• •Encryption in Transit: TLS 1.3 encryption across all public web and API endpoints.
• •Encryption at Rest: AES-256 database and secret token storage encryption.
• •Access Controls: Role-Based Access Control (RBAC) and multi-factor admin authentication.
• •Network Firewalls: Automated DDoS mitigation, rate-limiting, and web application firewalling.

Where personal data is transferred across international borders, AarMarks Media Pvt. Ltd. ensures appropriate transfer mechanisms are in place, including Standard Contractual Clauses (SCCs) and compliance with international privacy frameworks.

As a Data Processor, 1SocialSnap will promptly assist Data Controllers in fulfilling data subject requests under GDPR and applicable privacy laws:

• →Right of Access & Export: Export your scheduled content, account profiles, and logs directly from your workspace.
• →Right to Rectification: Edit or update account credentials and post details at any time.
• →Right to Erasure ("Right to be Forgotten"): Request full account and data purge within 30 days.

1SocialSnap maintains an active Security Incident Response Plan. In the event of a confirmed personal data breach affecting your data, we will notify impacted users and controllers without undue delay (and within 72 hours of confirmation) with relevant breach details and remediation steps.

Personal data is retained only for as long as necessary to provide the 1SocialSnap service or satisfy legal obligations. Upon account termination or written request:

• •Connected social tokens and credentials are destroyed immediately upon account deletion.
• •Drafts, media assets, and post logs are purged from production databases within 30 days.