Data Processing Addendum

This DPA applies when Media Yard LLC processes personal data on your behalf while providing webhookmill. Operator address: PO Box 73, Pennsauken, NJ 08110.

Roles

You are the controller of event payloads and customer endpoint data. Media Yard LLC is the processor for that data, and the controller of account emails and billing records.

Processing

We process payloads only to sign, enqueue, deliver, retry, log, and display them in your dashboard and the customer portal you share. Subprocessors, when live, are Stripe (billing) and Resend (transactional email). Hosting is Vercel-shaped; the database is Neon-shaped Postgres in production.

Security

API keys are stored hashed. Signing secrets are stored so we can sign; rotate them from the customer portal if a destination is compromised. Transport is TLS.