Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the agreement between Guste Build LLC ("Company," "we," "us," or "our"), operating as GusteBuild, and the client ("Client," "you") for the provision of services. It describes how we process personal data on your behalf and the safeguards we apply. This DPA supplements our Privacy Policy and Terms of Service.

1. Definitions

"Personal Data," "Processing," "Controller," "Processor," and "Data Subject" have the meanings given to them under applicable data protection laws. For the purposes of this DPA, where we process Personal Data on your behalf, you act as the Controller and we act as the Processor.

2. Scope and Roles

This DPA applies only where we process Personal Data provided by, or collected on behalf of, the Client in the course of delivering our services (for example, contact lists for a marketing campaign, or customer records connected to an automation we build). You are responsible for the accuracy and lawfulness of the Personal Data you provide and for having a valid legal basis to share it with us.

3. Processing Details

Subject matter	Provision of SEO, digital marketing, AI agent development, and process automation services.
Duration	For the term of the engagement, plus any legally required retention period.
Nature & purpose	Storage, organization, analysis, and use of Personal Data solely to deliver the agreed services.
Types of data	Typically names, business email addresses, phone numbers, company details, and campaign or CRM records you provide.
Data subjects	Your customers, leads, employees, or contacts, as applicable to the engagement.

4. Our Obligations as Processor

When processing Personal Data on your behalf, we will:

• Process Personal Data only on your documented instructions, including as set out in the engagement, unless required by law;
• Ensure that personnel authorized to process Personal Data are bound by confidentiality obligations;
• Implement appropriate technical and organizational security measures (see our Security page);
• Assist you, where reasonably possible, in responding to data subject requests and in meeting your security and breach-notification obligations;
• Delete or return Personal Data at the end of the engagement, except where retention is required by law;
• Make available information reasonably necessary to demonstrate compliance with this DPA.

5. Sub-processors

You authorize us to engage third-party sub-processors (such as cloud hosting, email delivery, and analytics providers) to support delivery of the services. We remain responsible for the performance of our sub-processors and impose data protection obligations on them consistent with this DPA. We will inform you of material changes to our sub-processors on reasonable request.

6. Security Measures

We maintain administrative, technical, and physical safeguards designed to protect Personal Data against unauthorized access, loss, alteration, or disclosure. Details of these measures are described on our Security page. No system can be guaranteed to be completely secure, and we do not warrant absolute security.

7. Data Breach Notification

If we become aware of a confirmed breach of security leading to the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of Personal Data we process on your behalf, we will notify you without undue delay and provide information reasonably available to us to assist your response.

8. International Transfers

Personal Data we process is primarily stored and processed in the United States. Where data is transferred across borders, we will rely on an appropriate transfer mechanism where required by applicable law.

9. Liability

Each party's liability under this DPA is subject to the limitations and exclusions of liability set out in our Terms of Service.

10. Contact Us

For data protection inquiries or to request a signed copy of this DPA, contact:

Guste Build LLC
10601 Clarence Dr, Suite 250, Frisco, TX 75033
Email: contact@gustebuild.com
Phone: +1 (225) 258-7946