UZZAP: represented by Bryan Seno, the DPO of Amplifi Technologies Corporation, who will also act as a witness for this agreement.
Client: the organization name provided by the account holder upon registration.
This document records the Data Sharing Agreement governing the Client's use of Uzzap's social media analysis service. It is not manually signed. By ticking the agreement checkbox during account creation, the Client agrees to the terms below, is automatically designated a separate Personal Information Controller (PIC) for its own subsequent use of the Shared Data, and has its account registrant automatically designated as its Data Protection Officer for this Agreement, unless otherwise specified in writing.
- Purpose: To provide the Client with sentiment, thematic, and comparative analysis, audience feedback, and an executive summary derived from publicly available Facebook posts and comments relevant to the Client's specified page, account, product, or campaign, for the Client's business intelligence, marketing, and reputation management purposes.
- Shared Data: Processed Facebook post and comment content and its derived analysis; aggregate engagement and sentiment metrics; and any incidental personal or sensitive personal data that may remain despite Uzzap's automated filtering, which the Client agrees to safeguard and use only for the stated purpose.
- Mode and Frequency: Delivered per engagement, as a downloadable PDF report and/or a shareable, access-controlled dashboard URL.
- Retention: Shared Data is retained for twelve (12) months from delivery, then securely deleted or anonymized, unless otherwise agreed or required by law.
- Security Measures: TLS 1.2+ encryption in transit, AES-256 at rest, role-based access controls, automated PII filtering, expiring/password-protected links with access logging, ISO/IEC 27001 or SOC 2-certified hosting, and periodic security review.
- Obligations: Each Party will use Shared Data only for the stated purpose, keep it confidential and secure, avoid third-party disclosure without consent (except as required by law), assist with Data Subject requests, and report any breach within 24 hours.
- Data Subject Rights: Data subjects retain all DPA rights: to be informed, access, correct, object, erase or block, port their data, claim damages, and complain to the NPC. Each Party will help facilitate these on request.
- Term: This Agreement remains in effect while the Client's account is active, and may end on 30 days' written notice, with Shared Data returned or disposed of at that point, except where retention is legally required.
- Governing Law: Philippine law, including the DPA and its IRR. Disputes are resolved first by good-faith negotiation, then Philippine courts or the NPC.
RECORD OF ACCEPTANCE
Accepted electronically via the account-creation checkbox. Client name, registrant email, and acceptance date are logged automatically at that time and available on request.
Note: Accepted electronically under RA 8792 (Electronic Commerce Act) and NPC guidance recognizing checkbox/click consent, provided the box is not pre-ticked and the terms are shown before acceptance. Not a substitute for advice from a Philippine lawyer or registered DPO.