Data Processing Agreement
For organizations using MAP’s API and services under our Terms of Service.
Last updated: October 2026
1. Purpose and scope
This Data Processing Agreement forms part of the Terms of Service between Media Alert Press LLC (“Processor”) and any client or organization (“Controller”) that uses our services to process personal data. It sets out how we handle personal data processed on your behalf.
2. Roles
As Controller, you determine the purposes and means of processing personal data you submit to MAP. As Processor, Media Alert Press LLC processes that data only on your documented instructions, and maintains appropriate security and confidentiality.
This Agreement covers personal data that you, as Controller, send to MAP’s services to be processed on your behalf, including the URLs and content you submit for verification. It does not cover the billing data that Media Alert Press LLC collects in order to sell and run a paid plan: the email address entered at checkout, the publisher ID, subscription and payment status, billing records and API key records. We decide the purposes for which we use that billing data, and it is described in the Privacy Policy rather than in this Agreement.
3. Nature of processing
MAP processes the personal data necessary to operate the services you use: account and access data (names, emails) for account management, payment card information (handled directly by our payment processor; we never see or store it) for billing, and URLs/content submitted for verification.
For MAPIOS Intelligence and MAPIOS Professional, this Agreement covers the monitoring terms you enter (the organizations, markets and topics you choose to follow, which can include the names of people), the profile names you choose and the news items MAPIOS lists for them, to the extent they contain personal data that you send to MAP’s services. We process them only to provide MAPIOS to you: to run your scans, show you the results, support you and keep the service secure. When a scan runs, each monitoring term in it is sent as a search query to Google News and to GDELT, which are public news search services that we use without a key; the query contains only the monitoring term, and those services handle it under their own terms. When access to MAPIOS ends, or is suspended for non-payment, we remove the profiles and the listed items from the application. We may keep a copy of the monitoring terms and profile names until you ask us to delete it (write to privacy@mediaalertpress.com from the address you used at checkout), and we then delete it within a reasonable period. The Organization ID, the status of the subscription, the Stripe identifiers and the email address entered at checkout are billing data that this Agreement does not cover; the Privacy Policy, Section 19, describes them.
4. Subprocessors
We engage the following subprocessors to operate the services: Amazon Web Services (cloud infrastructure, API hosting and database backups), Namecheap, Inc. (website hosting and Private Email), Automattic Inc. / WordPress.com (image CDN and Jetpack), Google LLC (analytics, only if accepted through the cookie banner), and Stripe, Inc. (payment processing). See the Privacy Policy section 4 for the full list of third parties. Each subprocessor is bound by its own data protection obligations. We will notify Controllers of any material change to this list.
5. Security
We apply security practices including HTTPS/TLS encryption in transit, access controls, and rate limiting on our systems. We are not currently certified under SOC 2 or ISO/IEC 27001; where a Controller requires evidence of specific controls for their own compliance program, contact legal@mediaalertpress.com and we will provide what documentation is available.
6. International transfers
Where personal data is transferred outside the country of origin (including to the United States), we rely on standard contractual clauses or equivalent safeguards where required by applicable law.
7. Data subject rights
We will assist Controllers in responding to data subject requests (access, correction, deletion, portability) relating to data we process on their behalf, within a reasonable timeframe.
8. Breach notification
If we become aware of a security incident affecting personal data we process on your behalf, we will notify you without undue delay after we confirm the incident, and provide the information reasonably available to support your own notification obligations.
9. Deletion on termination
Upon termination of services, we will delete or return personal data processed on your behalf within a reasonable period, except where retention is required by law. When a paid subscription ends, its API keys are deactivated. In our own systems, the one-way hashes of deactivated keys and our billing and subscription records are not deleted automatically: we keep them for as long as we need them for accounting, tax and dispute purposes and as the law requires, and delete them on request where the law allows. Each record in the keyed-request log is set to expire 90 days after the request; our database removes expired records automatically, which can take a few days. See the Privacy Policy, Sections 8, 18 and 19. For MAPIOS, deletion follows the paragraph on MAPIOS in Section 3: we remove the profiles and listed items when access ends, and we delete the copy of the monitoring terms and profile names when you ask us to.
10. Governing law
This Agreement is governed by Wyoming law, consistent with our Terms of Service.
11. Contact
Media Alert Press LLC, 15050 Elderberry Lane, Fort Myers, FL 33907. Email: legal@mediaalertpress.com | Phone: (239) 722-9982