Food trade software
Data Processing Addendum
Last updated 27 September 2026.
Software only. We do not buy, sell, ship or hold money.
When this addendum applies
This Data Processing Addendum (“DPA”) is part of the Terms of Service. It applies when you, as a business customer, upload personal data to the software and data-protection law says we process it on your behalf.
VERTEX IMPORT EXPORT LLC, 5900 Balcones Dr, Ste 100, Austin, TX 78731, USA is the processor. You are the controller. VERTEX COMERCIO, EXPORTAÇÃO E IMPORTAÇÃO LTDA., CNPJ 47.137.159/0001-16, Q SCS Quadra 02, Bloco C, Número 22, Sala 706, parte B, CEP 70.300-902, Brasília/DF, Brazil may act as a sub-processor for Brazilian operations. The public marketing site, where we decide the purposes ourselves, is covered by the Privacy Policy, not by this DPA.
Instructions and security
We process customer personal data only to provide the software, to secure it, and to follow your written instructions or the law. We will tell you if an instruction appears to break the law.
We use access control, encryption in transit, and the measures described on the Security page. People who can reach customer content are limited to those who need it.
Sub-processors and transfers
We use infrastructure and email hosts, and Stripe for payments. Stripe is the merchant of record for the card data and does not receive your shipment files from us. A current list of sub-processors is available from privacy@vertexexport.com. We will tell account customers before we add a sub-processor, and they may object on reasonable data-protection grounds.
Transfers from the EEA, the UK or Switzerland use SCCs or the UK addendum, as described in the Privacy Policy. You authorise those transfers for the purpose of providing the software.
Rights, deletion and incidents
We will help you answer a data-subject request, taking into account how the software works. We will delete or return customer personal data within 30 days after the subscription ends, unless the law requires us to keep it.
We will notify you without undue delay after we confirm a personal-data breach that affects customer content, and we will share what we know so you can meet your own notice duties.