Data Processing Agreement

Roles and responsibilities around data collection and processing

Summary:

  • This DPA applies to users who do not have a separate DPA on file with Storytell
  • This DPA describes the responsibilities of the user and Storytell surrounding data uploaded to Storytell
  • Our collection and use of personal information is governed by our Privacy Policy, which outlines our SOC 2 Type 2 compliance.
  • The use of our platform is governed by our Terms of Service.
01
Want to read our full Data Processing Agreement?

Everything You Need to Know

Last updated: January 1, 2024

Data Processing Agreement (DPA)

This Data Processing Agreement ("Agreement") is applicable to Storytell users ("Users") who do not have a separate Data Processing Agreement in place and Signal from Noise, Inc. (“Storytell” or "Data Processor") (collectively referred to as the "Parties") on the effective date above. By using Storytell, Users agree to be bound by this Agreement.

Purpose and Scope

The purpose of this Agreement is to outline the terms and conditions under which Storytell will process personal data on behalf of the Data Controller.

This Agreement applies to all personal data shared with Storytell by the Data Controller in connection with the use of the Storytell platform.

Roles and Responsibilities

  1. Data Controller Responsibilities:
    1. The Data Controller shall ensure that all personal data shared with Storytell is done so in compliance with applicable data protection laws and regulations.
    2. The Data Controller shall be responsible for obtaining any necessary consents or authorizations from data subjects.
  2. Data Processor Responsibilities:
    1. Storytell shall process personal data solely on behalf of the Data Controller.
    2. Storytell shall implement appropriate technical and organizational measures to ensure the security and confidentiality of the personal data.
    3. Storytell shall promptly notify the Data Controller in the event of any data breaches or unauthorized access to personal data.
  3. Data Processing Activities:
    1. Storytell shall process personal data for the following purposes:
      1. Providing access to the Storytell platform and its features
      2. Analyzing and summarizing data to generate insights and reports
      3. Facilitating communication and collaboration between users
      4. Improving the functionality and performance of the Storytell platform
  4. Data Subject Rights: 
    1. Storytell shall assist the Data Controller in fulfilling its obligations to respond to data subject requests, including requests to access, rectify, restrict, or erase personal data.
      1. Storytell shall promptly notify the Data Controller of any data subject requests received directly by Storytell.
  5. Subprocessing: 
    1. Storytell may engage subprocessors to assist in the provision of its services
      1. Storytell shall ensure that any subprocessors it engages are bound by written agreements that provide the same level of data protection and security as set forth in this Agreement.
      2. The Data Controller will be notified of any changes to subprocessors in Storytell's Privacy Policy, located at https://go.storytell.ai/privacy
  6. Data Security 
    1. Storytell shall implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
      1. These measures shall be in accordance with industry best practices and comply with applicable data protection laws.
  7. Data Retention and Deletion
    1. Storytell shall retain personal data only for as long as necessary to fulfill the purposes outlined in this Agreement or as required by law.
      1. Upon termination of User's account, Storytell shall delete all personal data to the Data Controller, unless otherwise required by law.
  8. Governing Law and Jurisdiction
    1. This Agreement shall be governed by and construed in accordance with the laws of Delaware
      1. Any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of Delaware.
      2. This Data Processing Agreement is effective as of the date above and shall remain in effect until terminated in accordance with its terms.