Last updated: 2026-11-09
This Data Processing Addendum (the "addendum") is part of the terms of service for Two-Way Sync for Airtable between you, the customer, and Sweekly Apps LLC, a Wyoming limited liability company, 30 N Gould St Ste N, Sheridan, WY 82801, United States ("we"). It applies when we process personal data on your behalf as your processor while providing the product, for example data about your customers, users or contacts, under the EU or UK General Data Protection Regulation or a similar data protection law. Data we use for our own purposes, such as your account and billing details, is covered by our privacy policy instead. If this addendum and the terms disagree on data protection, this addendum wins.
We process that personal data only on your documented instructions. The terms, this addendum and the way you set up and use the product are your instructions. We do not use the data for our own purposes, sell it or use it for advertising. If a law requires us to process it otherwise, we tell you first unless that law forbids it. If we believe an instruction breaks data protection law, we tell you.
Only people who need the data to run the product can access it, and they are bound by confidentiality. We keep appropriate technical and organisational measures to protect it: data travels over HTTPS; access tokens and keys the product stores are encrypted; and only the product's code and the sub-processors below process it.
Region: Customer Personal Data is stored in Cloudflare D1 with a North America location preference. Cloudflare does not guarantee the region, and requests are processed on its global network. Sub-processor transfers outside the EEA, Switzerland or the UK rely on the Standard Contractual Clauses and the UK addendum in the sub-processor's data processing terms.
You authorise the sub-processors listed here and in our privacy policy:
Each is bound by a written contract with data protection obligations no weaker than this addendum, and we remain responsible for them. We tell you about a new or replaced sub-processor at least 30 days before it starts, in the product or by email, and update the list. You can object by emailing support@sweekly.app; if we cannot meet the objection, you can cancel, and we refund the unused part of any prepaid period.
Taking into account the nature of the processing, we help you answer requests from people exercising their data protection rights, and pass on to you any such request we receive about your data. We also help you with security, breach notifications, data protection impact assessments and consultations with a supervisory authority where the law requires them.
We notify you without undue delay after becoming aware of a personal data breach affecting your data, with the information we have and what we are doing about it, and we keep you updated.
When you stop using the product, the personal data is deleted within 30 days of uninstall, or when you ask, unless the law requires us to keep it. Before you leave, you can ask for a copy by emailing support@sweekly.app.
We make available the information needed to show that we meet this addendum and Article 28 of the GDPR, and we allow audits, including inspections, by you or an auditor you mandate, on 30 days' written notice, at your cost, and not more than once a year unless a supervisory authority requires it or after a personal data breach.
Where personal data protected by the GDPR is transferred to us or a sub-processor in a country without an adequacy decision, the standard contractual clauses approved by Commission Implementing Decision (EU) 2021/914 are incorporated into this addendum: Module Two where you are a controller and Module Three where you are a processor, with you as data exporter and us as data importer. Clause 7 applies; under Clause 9, option 2 applies with the notice period in section 4; the option in Clause 11 does not apply; under Clauses 17 and 18, the law and courts of Ireland apply. Annex I is section 11, Annex II is section 3, and Annex III is the list in section 4; the competent supervisory authority is that of the Member State where you are established, or else where our EU representative is.
For data protected by the UK GDPR, the UK International Data Transfer Addendum to those clauses is incorporated, with the same details; for Swiss data, references to the GDPR mean the Swiss Federal Act on Data Protection. Where a recipient is certified under the EU–U.S. Data Privacy Framework (or its UK or Swiss extension), the transfer may rely on that framework instead.
This addendum lasts as long as we process personal data on your behalf. Liability under it is subject to the limitation of liability in the terms, except where the standard contractual clauses or the law do not allow that.