Data processing agreement
Last updated: October 7, 2026
This agreement describes how Autonomah processes the personal data it receives on behalf of each client brand. It is issued by DX CLOUDITIVE LLC, doing business as Autonomah, a Florida limited liability company, United States, Sunbiz document number L26000219015, at 7901 4th St N, Ste 300, St Petersburg, FL 33702, United States. It is part of the services agreement each brand signs.
1. Roles
| Data | Who decides what it is used for | Who processes it |
|---|---|---|
| Data from the brand's social accounts and its audience, as each network shows it to the account holder | the brand | Autonomah, on the brand's behalf |
| Data about the people on the brand's team who use the application | Autonomah | Autonomah |
| The brand's billing data | Autonomah | Autonomah |
2. Instructions
Autonomah processes the brand's personal data only to provide the service, under this agreement, the services agreement and what the brand configures in the application. It does not use that data for its own purposes or for another client's.
3. Separation between clients
Each brand's data is kept separate from any other brand's, with access limited to that brand and the people it authorizes. A piece, text, image or data point from one brand never appears in what is delivered to another. The only thing that can serve everyone is general rules that identify no brand and no person, such as a formatting mistake worth avoiding.
4. Data processed and why
| Data | Where it comes from | Purpose |
|---|---|---|
| Identifiers of the connected accounts and their access permissions | the brand, when it connects each network from its own account | publishing to and reading the authorized accounts |
| Published content and its history | the networks | the diagnosis and the proposals |
| Metrics the network shows the account holder | the networks | the calendar and the reports |
| Content of the pieces and material the brand provides | the brand and Autonomah | creating and reviewing each piece |
| Approval record: who approved which piece, for which network and when | the application | proof that a person approved each piece |
| Name and email of authorized people | the brand and the sign-in | access control |
5. Subprocessors
The providers that process data on Autonomah's behalf are on the subprocessor list. Autonomah notifies the brand before adding a new one that processes its data and is responsible for them as for its own acts.
6. Security
Encryption in transit, identity-based access control, credentials kept out of the code and passwords stored with key derivation (PBKDF2 with SHA-256). No system is completely secure and Autonomah does not promise that it is.
7. Incidents
If a security incident affects the brand's data, Autonomah notifies the brand without undue delay once it becomes aware, with what it knows at that moment, and keeps it informed as it learns more.
8. People's rights
When a person asks for access, correction, deletion, objection or portability regarding data Autonomah processes on a brand's behalf, Autonomah forwards the request to the brand and assists it as is reasonable. It does not resolve on its own a request about data for which the brand is responsible.
9. When the service ends
Autonomah revokes its access to the brand's accounts and, at the brand's choice, returns or deletes the personal data processed on its behalf, except what a law requires it to keep. Posts already published remain on the networks: Autonomah does not remove posts, and the brand can delete them from its own account.
10. Where data is processed
On Google Cloud infrastructure located in the United States.
11. Contact
Email: hola@autonomah.com