Data processing addendum

askforstars.com is operated by Media Yard LLC, PO Box 73, Pennsauken, NJ 08110. Contact hello@askforstars.com. Using the service includes this addendum. No extra signature is required. For a countersigned copy, email hello@askforstars.com from the account email.

This is a short addendum on purpose. v1 does not collect end-customer phone numbers or review bodies. You send the text from your own phone. We never SMS.

Roles

Media Yard LLC is the controller of account data: your email, saved shop name, Place ID, script, generate timestamps, and Stripe billing identifiers if you pay.

We are not a processor of your customers’ phone numbers, names, or review text. We do not hold that pile. Do not paste customer phone numbers into this product in v1.

If a later Places lookup key is configured so Google looks up a Place ID on your instructions, Google LLC is a subprocessor for that lookup only. Until that key exists, v1 works from paste and there is no Google subprocessor.

What we process as controller

Usage metadata only: a Maps URL or Place ID you pasted, the generated write-review link, shop name and script if you save, your account email, and generate timestamps. We do not store customer phone lists. We do not send SMS. We do not write reviews. We do not train on this data.

Subprocessors of account data

We will update this page at least 30 days before a new party sees account data.

Security and breach

We use TLS and limit access to people who run Askforstars. If we learn of a personal-data breach, we will notify affected account holders without undue delay and, where required, within 48 hours of becoming aware.

UK GDPR and EU GDPR

Where those laws apply to account data, our lawful bases are contract (running the shop profile and billing) and legitimate interests (security logs). You can ask hello@askforstars.com for a copy, a correction, or deletion of the shop record. We answer within one month.

We have not appointed an Article 27 representative. If we do, Privacy will name them.

Transfers: the product is hosted in the United States. For EEA account data we use the 2021 EU SCCs (Module One, controller to controller, with Vercel and the account processors above). For UK transfers, the UK Addendum Part 2 Mandatory Clauses of template Addendum B.1.0 issued by the ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as revised under Section 18, apply. Neither party may end that Addendum under Section 19. We are not DPF-certified.

CCPA

We do not sell or share personal information as those words are used in the CCPA/CPRA. We do not collect consumer phone numbers in v1.

End

When you cancel, we stop using the shop record for the live product and delete or anonymize it after a short hold, unless the law says we must keep a piece (paid invoices).

New Jersey law and New Jersey courts govern this addendum, except where UK or EU GDPR applies of its own force.

This page is not legal advice. Media Yard LLC does not have lawyers on staff.