Data Processing Agreement (DPA)

Effective September 18, 2026

Effective Date: September 18, 2026

This Data Processing Agreement ("DPA") forms an integral part of the Terms and Conditions between Mint Soft EOOD, a company registered in Bulgaria with UIC 205333053 ("Processor," "we," "us," or "our"), and you, the user of the sciSEO platform ("Controller," "you," or "your").

This DPA applies to the extent that we process Personal Data on your behalf in the course of providing the sciSEO AI copywriting and SEO platform (the "Service").

1. Definitions

  • "Personal Data" means any information relating to an identified or identifiable natural person submitted to the Service by the Controller.
  • "Processing" means any operation performed on Personal Data, such as collection, storage, organization, structuring, retrieval, consultation, or use.
  • "Sub-processor" means any third party appointed by the Processor to process Personal Data on behalf of the Controller.

2. Roles and Scope of Processing

  • Roles: For the purposes of data processing laws, you are the Data Controller (determining the purposes and means of processing) and Mint Soft EOOD is the Data Processor (processing data on your behalf).
  • Subject Matter and Nature: The processing of Personal Data is carried out strictly for the purpose of providing the sciSEO platform services, including analyzing SEO metrics, generating AI content based on your prompts, and publishing content.
  • Categories of Data: Personal data processed may include names, contact details, or other personal identifiers that you, your employees, or your clients voluntarily include in AI prompts, text inputs, or connected third-party integrations (e.g., WordPress authors).
  • Restriction on Sensitive Data: You agree not to input sensitive Personal Data (including but not limited to health data, financial data, or special categories of data) into the sciSEO AI prompts or platform. We bear no liability for the processing of sensitive data submitted in violation of this clause.

3. Obligations of the Processor (Mint Soft EOOD)

We agree to:

  • Process on Instructions: Process Personal Data only on your documented instructions (which include using the Service in accordance with our Terms and Conditions).
  • Security and Limitation of Liability: We implement appropriate technical and organizational measures to ensure a baseline level of security for the platform. However, you explicitly acknowledge and agree that in the event of a cyberattack, unauthorized hacking, or data breach resulting in the leak or exposure of your Personal Data or confidential information, Mint Soft EOOD bears absolute zero liability. You use the Service and input data entirely at your own risk.
  • Data Subject Rights: Assist you, insofar as possible, with your obligation to respond to requests from individuals exercising their data rights (e.g., right to access, rectify, or erase data). If we receive a request directly from a data subject regarding your data, we will promptly forward it to you.
  • Breach Notification: Notify you after becoming aware of a Personal Data breach affecting your data, subject to the limitations of liability stated above.

4. Sub-processing

You grant us general authorization to engage Sub-processors to deliver the Service. Our current primary Sub-processors include:

  • Railway Corp. (USA): hosting of the sciSEO platform, its databases and cache, and object storage for generated images and uploaded files.
  • Cloudflare, Inc. (USA): network security and delivery in front of our sites, the Turnstile anti-bot check on public forms, and encrypted off-site database backups.
  • Google (Google Cloud and Google AI): Gemini language models used to generate and check content; Search Console, Google Ads, PageSpeed Insights and Chrome UX Report APIs when you use those features.
  • OpenAI and OpenRouter: additional language model providers used to generate and check content.
  • Polar Software Inc.: processing subscriptions and billing information securely.
  • Meta Platforms: conversion measurement for our advertising (hashed identifiers only, and only where marketing consent was given on our Website).
  • Shopify and your own WordPress or WooCommerce site: content synchronization and publishing when you connect them.
  • Open PageRank by Keywords Everywhere: domain-strength lookups for the SEO tools (receives only the public website address).
  • Our own mail server (sciseo.com): transactional email delivery.

We reserve the right to add or replace Sub-processors at our sole discretion. We will inform you of any intended changes strictly by updating this DPA or the relevant documentation on our Website. We are not obligated to notify you via email. By continuing to use the Service, you accept the new Sub-processors, and you explicitly waive any right to object to our selection of Sub-processors.

5. Deletion and Return of Data

Upon termination of your sciSEO account or expiration of your subscription, we will, at your choice, delete or return all Personal Data processed on your behalf, unless applicable laws require the storage of the Personal Data (such as for tax or legal compliance purposes).

6. Contact

For any data protection inquiries, to exercise data subject rights, or to report a suspected breach, please contact us at:

Email: [email protected]