Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you (the "Customer" or "Data Controller") and Soliroush LLC (the "Processor"), operating EmailRSVP (located at https://emailrsvp.com).

1. Scope and Nature of Processing

Soliroush LLC processes personal data strictly on your behalf and in accordance with your documented instructions, solely to deliver event invitation, RSVP management, and check-in scanning services.

2. Controller Obligations and Sole Liability

As the Data Controller, you are solely responsible and liable for the legality, accuracy, and quality of the Personal Data you submit to our systems. You warrant that you have secured all necessary consents and legal bases (e.g. GDPR/CCPA) for inviting guests and processing their contact details.

3. Processor Obligations

As the Data Processor, we agree to process data only on your instructions, keep data confidential, notify you of data breaches within 72 hours, and assist you in responding to Data Subject rights requests.

4. Sub-processors

You authorize us to engage Sub-processors (such as Google Cloud Platform and Firebase) to host the application. We ensure all Sub-processors maintain equivalent data safety standards.