Legal & trust
Data Processing Addendum
This page is a public template summary of BlueTier’s Data Processing Addendum (DPA). For members, the DPA applies through the membership terms presented and accepted during onboarding; for contracted services it is executed with the signed agreement. Where an executed agreement differs from this summary, the executed agreement controls. BlueTier is operated by Black Belt Management Group LLC.
- Effective and last updated
- Sections
- 8
- Reading time
- 2 min
On this page · 8 sections
Scope and roles
The DPA governs BlueTier’s processing of personal data while providing the service and any contracted services. The member is the controller of the personal data it provides or authorizes; BlueTier acts as the processor, processing that data only on the member’s documented instructions and as needed to provide the service.
Processing purposes
Processing is limited to providing, maintaining, securing, and supporting the service: onboarding, campaign configuration and operation within the parameters the member approves, AI-assisted drafting and recommendations, analytics and reporting, service notifications where offered, and recordkeeping required by law or the agreement.
Subprocessors
BlueTier engages the subprocessors listed on the subprocessors page for web hosting, database and authentication, background processing, AI inference, operational records, error monitoring, and connected-account connectivity. The list is kept current as vendors change, and members may request notice of material subprocessor changes.
Security measures
BlueTier maintains the technical and organizational measures described on the security page, including data minimization, signed and expiring sessions, optional two-factor authentication (TOTP) for dashboard sign-in, TLS encryption in transit, provider-managed encryption at rest on the Postgres data store, per-organization data isolation enforced with row-level security policies, rate limiting, and audit logging of operator and account actions. BlueTier does not claim certifications it has not obtained.
International transfers
Where personal data is transferred across borders, BlueTier relies on an appropriate legal transfer mechanism — such as standard contractual clauses or an adequacy decision — as required by applicable data-protection law, and limits processing to the service purpose.
Audit rights
Members may request reasonable information about BlueTier’s processing and security measures to verify compliance with the DPA. Requests are coordinated through info@bluetier.ai and scoped to protect other members’ data and platform security.
Deletion at termination
On termination of the service, member data is deleted or returned within a reasonable period, subject to the retention schedule in the privacy policy, the account lifecycle policy, backup rotation, and records BlueTier must keep for legal, accounting, or dispute purposes.
Contact
To request an executed DPA or ask a question about this template, email info@bluetier.ai with “DPA request” in the subject line.
Questions or correction requests?
Use the contact form or email info@bluetier.ai. Never include an account password or verification code.
Contact