Data Processing Agreement

Last updated November 4, 2026

This Data Processing Agreement ("DPA") describes how SHIP IT Inc. ("SponsorWell") processes personal data on behalf of organizations ("Customer") that use the SponsorWell platform.

Roles

• Customer is the controller of personal data entered into its workspace.
• SponsorWell is the processor and processes personal data only on the documented instructions of Customer.

Scope of processing

We process account, contact, and sponsorship data solely to provide the platform: storage, retrieval, email delivery, payment processing metadata, and reporting.

Subprocessors

We use subprocessors for cloud hosting, email delivery (Mailgun), and payment processing (Stripe). Each is bound by terms consistent with this DPA. A current list is available on request.

Security measures

SponsorWell maintains the safeguards described on the Security Standards page, including encryption in transit and at rest and tenant-level access controls.

Data subject requests and deletion

We assist Customers in responding to access, correction, and deletion requests. On workspace closure or termination, Customer data is exported or deleted on request within a reasonable period.

Governing terms

This DPA is incorporated into the agreement between Customer and SponsorWell. If it conflicts with that agreement, the subscription terms control.

Questions: legal@sponsorwell.io.