Legal

Data Processing Agreement

Effective date: June 9, 2026

1. Roles

When you submit URLs through the MAP API that may contain personal data, you act as the data controller and Media Alert Press acts as the data processor. We process submitted URLs only for verification analysis and in accordance with your instructions.

2. What We Process

Through API use, MAP processes: submitted URLs; IP addresses (hashed for rate limiting); API key identifiers; request timestamps; and verification result data. We do not process payment card data directly. We do not process biometric data, health data, or special category data as defined under GDPR.

3. Data Retention

Verification request logs are retained for 90 days. Verification Archive entries are retained indefinitely as part of MAP’s public transparency record, unless removal is required by law. Account data is retained for the duration of your subscription plus 30 days.

4. Sub-processors

MAP uses: Amazon Web Services (compute and storage); Stripe (payment processing); and our hosting provider (infrastructure). We maintain written agreements with all sub-processors.

5. Security Measures

We implement: encryption in transit (TLS 1.2+) and at rest; API key HMAC signing; IP-based rate limiting; and access controls. In the event of a data breach, we will notify affected customers within 72 hours of discovery.

6. Contact