Data Processing Addendum

Last updated: 24 October 2026

This addendum is part of the Terms of Service. It is the Article 28 GDPR contract for the content you give BrandTimer and for serving timer images in your campaigns. It applies from the moment you save a timer or run a restyle while signed in. If you want a countersigned copy, email contact@uynix.com.

You are the controller. Vivivo Solutions, ul. Cicha 26, 96-513 Kozłów Biskupi, Poland, NIP 1251758025, REGON 526903367, is the processor (“we”). Words defined in the Terms have the same meaning here.

This addendum does not cover accounts, billing, or our own security logs. For those we are the controller, as set out in the Privacy Policy. Paddle is an independent controller for payment data, not our sub-processor.

1. What we process for you

Subject matter	Hosting countdown timers and serving a GIF when an email is opened.
Duration	For as long as the account exists, and until deletion under section 8.
Nature and purpose	Store templates and brand kits, render them to image parts, restyle them with AI when you ask, and compose the GIF on each open.
Types of data	Timer HTML and CSS, timer settings, brand-kit fields, styling fetched from a public page you name, the restyle prompt and result, and aggregate open counts. A deadline added to the image address, used to draw that image and not stored against a person.
People	Your staff who use the account. Recipients of your emails only in the sense that their mail app requests an image. We do not receive their email addresses and we do not store their IP addresses in our database.

2. Your instructions

We process customer content only on your documented instructions: these Terms, this addendum, and the actions you take in the product (save, edit, restyle, delete). If a law forces us to go further, we tell you first unless the law forbids that.

You are responsible for having a lawful basis for the content you upload and for the emails you send. Do not put recipient lists, payment card numbers, or special-category data into a template or a brand kit. The picture is the same for every recipient, apart from the deadline.

3. Our obligations

We will:

make sure the people who handle customer content are bound to confidentiality;
apply the security measures in section 5;
use sub-processors only as section 6 allows;
help you answer requests from people whose data you control, taking into account how the service works. We do not hold a list of your recipients, so most recipient requests are answered by you from your email tool;
help you, where the information is in our hands, with a data-protection impact assessment or a consultation with an authority about this processing;
tell you without undue delay after we become aware of a personal-data breach affecting customer content, with what we know about what happened, what data is involved, and what we are doing about it;
delete customer content as section 8 describes;
make available the information reasonably needed to show that we meet this addendum.

4. Your obligations

You will give lawful instructions, keep your account secure, and not ask us to process data the service is not built to hold. You will tell your recipients that your emails load images from BrandTimer, where your notice should say that.

5. Security

Measures that match this service:

encryption in transit (HTTPS);
accounts separated so one customer cannot read another customer’s timers or brand kits;
signed checks on payment notifications;
rate limits on saves and on anonymous restyles;
image files stored in a private bucket and served only through the timer address;
no card data stored by us.

We do not claim a certification such as SOC 2 or ISO 27001.

6. Sub-processors

Sub-processor	Processing	Location
Cloudflare, Inc.	Hosting the app, database, and image files; rendering templates in a browser; delivering the GIF; AI restyle through Workers AI.	United States and Cloudflare’s global network.
Clerk, Inc.	Sign-in for your account. Clerk does not receive your recipients.	United States.
Resend, Inc.	Service email to you about usage limits. Resend does not email your recipients.	United States.

We stay responsible for a sub-processor’s work under this addendum. Each of them is bound by a written contract with data-protection terms no weaker than this one. Their DPAs are linked from the Privacy Policy.

This page is the current list. Before we add or replace a sub-processor who will process customer content, we tell you, so you can object by emailing contact@uynix.com. If you object and the service cannot be provided without that sub-processor, you may stop using BrandTimer and delete the account.

7. International transfers

Customer content is processed in the United States by the sub-processors above. The transfer mechanism is the EU-US Data Privacy Framework, where the recipient is certified, and the Standard Contractual Clauses. Those clauses are incorporated into this addendum. For the clauses, you are the data exporter and we are the data importer, and we in turn protect onward transfers to sub-processors. You can ask us for the relevant details.

8. Deletion

Deleting one timer keeps the “after the deadline” image available so emails already sent still resolve. Deleting the account deletes timers, brand kits, usage rows, and image files from the live service, and deletes the Clerk user. Type your email in Settings to confirm. A paid subscription has to be canceled first.

Short-lived backups at our host, where the host keeps them, expire on the host’s cycle. We do not use them to bring an account back after you have deleted it.

9. Audits

Once in any twelve months, you may ask in writing for a summary of the measures in section 5 and a confirmation of the sub-processors. We answer within 30 days. We do not offer on-site audits. If a supervisory authority lawfully requires more, we cooperate.

10. Order of documents

If this addendum conflicts with the Terms on a point of data protection, this addendum wins. Polish law governs it, on the same terms as the Terms of Service.