LAST UPDATED: 23.08.2026
This document is a draft based on common practice and on how the panel actually works. It is reviewed by the seller's lawyer before it takes effect.
This document sets out the data processing arrangement between the parties when you use the Zensyno SEO panel for your own customers. It is an addendum to the Terms of Service and takes effect when you accept that document; no separate signature is required.
1. PARTIES
| Company name | Zensyno Digital Performance Agency D.O.O |
|---|---|
| Tax number | 03759172 |
| Registration number | 5 - 1314094 / 001 |
| Address | 50 Hercegovacka, Podgorica, Montenegro, 81000 |
| Phone | +90 850 241 90 38 |
| info@zensyno.com |
In this document the "controller" is you and the "processor" is the company named above. For data relating to your own account and invoice the company is the controller; that data falls under the Privacy Policy.
2. SUBJECT MATTER OF THE PROCESSING
| Subject | Provision of the Zensyno SEO panel: measurement, reporting and document generation. |
|---|---|
| Period | For as long as your subscription lasts and for 90 days after your account is closed. |
| Nature of the processing | Collection, storage, organisation, calculation, display, export and deletion. |
| Types of data | Name, e-mail address and contact details of the people you add to the panel; the domains and keywords you track; the measurement results appearing in reports. |
| Categories of data subjects | Your customers, their employees and the users you grant access to the panel. |
3. OBLIGATIONS OF THE PROCESSOR
- We process the data only on your instructions and only to provide the service.
- People who access the data are bound by confidentiality and access is limited to those who need it to do their job.
- We take technical and organisational security measures appropriate to the risk; encrypted transport, role based permissions, access logging and encrypted secret storage are among them.
- We help you respond to data subject rights and provide the information you need to satisfy requests that reach you.
- We do not settle a data subject request that reaches us directly; we forward it to you.
- We provide the information needed to demonstrate compliance with this document and allow an audit carried out at reasonable intervals and with prior notice.
- If we consider one of your instructions to be contrary to the applicable law, we tell you.
4. OBLIGATIONS OF THE CONTROLLER
- You warrant that you have a legal basis for the personal data you enter into the panel and that you have provided the required information notice.
- You are responsible for your instructions being in line with the applicable law.
- Managing the permissions of the users you grant access to, and removing access for users who leave, is up to you.
- You must not enter special categories of personal data into the panel.
5. SUBPROCESSORS
We use the following subprocessors to provide the service. We have an agreement with each of them containing obligations equivalent to those in this document, and we remain liable to you for the acts of the subprocessor.
| Provider | Why it is used | Data transferred |
|---|---|---|
| Paddle.com Market Limited | Taking the payment, issuing the invoice, renewing the subscription and processing refunds. | Name, e-mail address, billing details, the payment method itself and transaction records. |
| Cloudflare | Hosting the panel, database and file storage, attack and abuse filtering. | All data entered into the panel together with technical records of requests (IP address, browser information). |
| DataForSEO | Running ranking, keyword and link measurements. | The domain, keyword, country and language to be measured. The account holder's identity details are not sent. |
| Sending notification and support e-mails, reading data from the Search Console and Analytics accounts you authorise, running the text generating features. | Recipient e-mail address and message content, measurement data of the properties you connect, the text submitted for generation. | |
| Sentry | Collecting fault records and fixing errors. | Error message, request address and technical context. Personal fields are masked before they are sent. |
Before adding a new subprocessor to the list or replacing an existing one, we send a notice to your registered e-mail address. You may object on justified grounds within 30 days of the notice; if we cannot resolve your objection, you may terminate your subscription without penalty.
6. TRANSFERS TO THIRD COUNTRIES
Montenegro is not a member of the European Union and some of the subprocessors are outside the European Economic Area. The transfer relies on the European Commission's standard contractual clauses or on an equivalent safeguard framework. You can request a copy of the safeguards we use at info@zensyno.com.
7. PERSONAL DATA BREACH NOTIFICATION
When we become aware of a personal data breach we inform you without undue delay. In the notice we describe the nature of the breach, the types of data affected, its likely consequences and the measures we have taken, to the extent of the information available to us. The obligation to notify the supervisory authority and the data subjects rests with you as controller; we give you the support you need to prepare that notification.
8. RETURN AND DELETION OF DATA
- While your subscription is running you can export your data at any time.
- After your account is closed the data is kept for 90 days; within that period you can ask for it to be exported or deleted immediately.
- At the end of the period the data is deleted. Financial records that the law requires us to keep are outside this rule and are held in a separate record area.
- Data remaining in backup copies is deleted in the normal course of the backup cycle.
9. TERM AND GOVERNING LAW
This addendum remains in force for as long as your subscription lasts and until the data is deleted.
This document and the relationship arising from it are governed by the law of Montenegro.
The courts of Podgorica have jurisdiction over disputes.
If you act as a consumer resident in the European Union, the rights granted to you by the consumer law of your own country that cannot be limited by contract remain reserved; the jurisdiction clause above does not remove those rights.
Please contact us first at info@zensyno.com; we try to resolve requests without going to court.
10. CONTACT
You can send questions about data processing and audit requests to us using the contact details above.