Skip to Content

Data Processing Addendum

Last updated: June 2026

This Data Processing Addendum ("DPA") forms part of the Terms of Service between PQG LLC, doing business as EasyBoostMedia ("Processor", "we"), and the customer ("Controller", "you"). It applies where we process personal data on your behalf and is incorporated into the Terms by reference. By accepting the Terms, you accept this DPA.

1. Roles and Scope

For personal data you or your users submit to your instance ("Customer Personal Data"), you act as the controller and we act as the processor. We process Customer Personal Data only to provide and support the Service and on your documented instructions, including as set out in the Terms, our Privacy Policy, and this DPA.

2. Nature of Processing

  • Subject matter: hosting and operation of your Odoo Cloud instance.
  • Duration: for the term of your subscription plus the retention window described in the Terms.
  • Purpose: to provide, secure, back up, and support the Service.
  • Data subjects: determined by you (e.g., your customers, suppliers, staff).
  • Data types: determined by you (e.g., names, contact details, transactions, documents).

3. Your Instructions

We will process Customer Personal Data only as needed to provide the Service and per your reasonable, lawful instructions. You are responsible for the accuracy and legality of the data you submit and for having the rights and consents needed to use the Service.

4. Confidentiality

Personnel authorized to process Customer Personal Data are bound by appropriate confidentiality obligations.

5. Security Measures

We implement technical and organizational measures appropriate to the risk, including tenant isolation, encryption in transit and at rest, access controls, and backups. See our Security page for details.

6. Subprocessors

You authorize us to engage subprocessors to provide the Service (such as DigitalOcean for hosting, Stripe for payments, and Google for authentication, plus any AI or messaging providers for features you enable). We remain responsible for their performance and impose data-protection obligations on them. A current list is available in our Privacy Policy or on request. We will give reasonable notice of new subprocessors; if you object on reasonable data-protection grounds, you may terminate the affected Service.

7. Data Subject Requests

Taking into account the nature of the processing, we will provide reasonable assistance to help you respond to requests from individuals exercising their rights. Where you can act directly within your instance, you will do so.

8. Personal Data Breach

We will notify you without undue delay after becoming aware of a personal data breach affecting Customer Personal Data, and will provide information reasonably available to help you meet your notification obligations.

9. Return or Deletion

On termination, we will, at your choice and where you can export directly, allow you to export Customer Personal Data within the retention window, after which we delete it; backups age out under our standard rotation, subject to legal retention requirements.

10. Audits

On reasonable written request and subject to confidentiality, we will provide information reasonably necessary to demonstrate compliance with this DPA.

11. International Transfers

We host in the United States for U.S. customers and provide support from Nicaragua. Where required, we rely on appropriate transfer safeguards. See our Privacy Policy.

12. Precedence and Term

This DPA applies for as long as we process Customer Personal Data. In case of conflict regarding the processing of personal data, this DPA controls over the Terms. All other terms remain in effect.

13. Contact

Questions about this DPA? Contact us at info@easyboostmedia.com.

PQG LLC, doing business as EasyBoostMedia. By accepting our Terms of Service, you agree to this DPA.