Data processing agreement

DPA · Auftragsverarbeitungsvertrag (AVV) under Art. 28 GDPR

When a store uses MONET, we process its buyers’ data at checkout on the store’s behalf. The store stays the controller; MONET is the processor. Every merchant signs our DPA before the first live order.

Processor

What the DPA covers

• Subject matter: running the checkout page, one-click offers and A/B tests for the merchant’s store.
• Data: buyer contact and shipping details, order contents, payment status and technical checkout data. Card numbers are handled by the payment provider, never stored by MONET.
• Instructions: we process data only on the merchant’s documented instructions.
• Security: technical and organisational measures under Art. 32 GDPR, described in an annex.
• Sub-processors: a current list (hosting, payment providers, email) with notice before any change.
• Deletion: data is returned or deleted when the contract ends.
• Transfers: outside the EU only with Standard Contractual Clauses or an adequacy decision.

Request the DPA

Email hello@getmonet.ai and we send you the current version to review and sign.