Data Processing Addendum

This Data Processing Addendum ("DPA") supplements the Terms of Service between Threaded Pear LLC ("Processor") and the customer ("Controller") for Pear Inventory. It applies to the extent Threaded Pear LLCprocesses personal data on the Controller's behalf.

1. Subject matter and duration

Subject matter: provision of Pear Inventory. Duration: term of the underlying subscription. Nature and purpose: hosting, processing, and transmitting Customer Data to provide warehouse and inventory management services.

2. Categories of data and data subjects

• Account users of the Controller (name, email, role, login activity).
• End customers and suppliers represented in the Controller's records (name, address, contact, order data) as uploaded or synced by the Controller.

3. Processor obligations

• Process personal data only on documented instructions from the Controller (including configured integrations).
• Ensure persons authorized to process the data are under appropriate confidentiality obligations.
• Implement appropriate technical and organizational measures, including encryption in transit, access controls, and audit logging.
• Notify the Controller without undue delay after becoming aware of a personal-data breach affecting Customer Data.
• Assist the Controller, taking into account the nature of processing, in responding to data-subject requests.
• On termination, delete or return Customer Data as described in our Privacy Policy.

4. Subprocessors

The Controller authorizes the use of subprocessors listed at /subprocessors. We will provide notice of new subprocessors by updating that page; you may object in writing within 14 days to legal@pearinventory.com.

5. International transfers

Personal data may be transferred to and processed in the United States and any other country where our subprocessors operate, subject to appropriate safeguards where required by applicable law.

6. Liability and conflicts

The liability and indemnification provisions of the Terms apply to this DPA. In the event of any conflict between this DPA and the Terms with respect to personal-data processing, this DPA controls.

7. Requesting a signed copy

Customers who require a signed countersigned copy of this DPA may email legal@pearinventory.com.