Legal
The agreements, policies and disclosures governing use of KitSlate
Overview. KitSlate is operated by MIXEL INC, a corporation organised under the laws of the State of New York, United States, doing business as KitSlate. The documents below govern use of the Service and describe how MIXEL INC handles Customer Data. They are maintained at stable addresses and may be cited directly in a vendor or procurement review.
Agreements and policies
- Terms & Conditions — the agreement between MIXEL INC and the Customer. Covers accounts and workspaces, ownership of Customer Data, subscriptions and billing, acceptable use, warranties, limitation of liability, termination, and governing law.
- Privacy Policy — what personal information is collected, the legal bases for processing it, who it is disclosed to, how long it is retained, international transfer safeguards, and the rights available to data subjects, including under the GDPR, the UK GDPR and the CCPA.
- Security — the technical and organisational measures applied to Customer Data: hosting and data residency, encryption, tenant isolation, authentication, payment card handling, backup and recovery, change management, incident response, vulnerability disclosure, and the current assurance and certification status of the Service.
- Subprocessors — the authoritative register of third parties engaged to process personal information, the processing each performs, and its location. Incorporated by reference into the Privacy Policy.
Acceptable use
The rules governing acceptable use of the Service — including prohibitions on unlawful use, unsolicited messaging, misrepresentation, circumvention of access controls and automated extraction — are set out at Section 20 of the Terms & Conditions. Good-faith security research conducted within the conditions published in Section 14 of the Security page does not breach that section.
Data processing
Where MIXEL INC processes personal information on a Customer’s behalf — for example the client, crew and cast records a Customer enters into its workspace — the Customer is the controller and MIXEL INC is its processor. That allocation of roles, and the obligations attaching to it, are set out in Section 11 of the Terms & Conditions and Section 3 of the Privacy Policy.
Customers requiring a separate data processing agreement to satisfy the GDPR, the UK GDPR or comparable legislation should contact [email protected].
Contact
Data protection enquiries and rights requests: [email protected]. Security reports: [email protected]. Contractual, billing and all other enquiries: [email protected].
MIXEL INC
a New York corporation, doing business as KitSlate
State of New York, United States
[email protected] · kitslate.app