Data Processing Addendum

Last updated October 13, 2026

This Data Processing Addendum ("DPA") is part of the runmygig Terms of Service between BTTRYZN LLC ("runmygig", "we", "us") and each producer or organization that runs Gigs on runmygig ("you"). It applies automatically when you agree to the Terms. No signature is needed. If you would like a copy for your records, save or print this page; if your organization needs a countersigned copy, email info@runmygig.com.

1. What this covers

"Gig Data" means personal information about other people that you collect or add through runmygig to run your Gigs: performers, crew, vendors, volunteers, guests and anyone else on a Gig. Examples are names, phone numbers, email addresses, sign-up answers, RSVPs, messages, check-ins and signed documents. It does not cover information about you as an account holder, our security records or our usage stats. For those, runmygig decides how the information is used, as our Privacy Policy explains.

2. Roles

For Gig Data, you are the controller (in California terms, the business) and BTTRYZN LLC is your processor (service provider). You decide why Gig Data is collected and what it is used for. We handle it to provide runmygig to you.

3. Your instructions

We process Gig Data only to provide runmygig as described in the Terms, as you direct through your settings and the things you do in the app, and as needed to keep the service secure and working. Those are your instructions. We do not sell Gig Data, share it for cross-context advertising, use it for our own marketing, combine it with information from other sources to build profiles, or use it to train AI models. If the law requires us to process Gig Data some other way, we tell you first unless the law forbids it.

4. Your responsibilities

You are responsible for having a lawful basis to collect Gig Data and to have runmygig message people, for telling people how their information is used, and for not collecting the kinds of information our Acceptable Use Policy forbids.

5. Confidentiality

Only people who need Gig Data to run, support or secure runmygig can access it, and they are bound to keep it confidential.

6. Security

We protect Gig Data with reasonable technical and organizational measures, including:

encryption of data in transit between your devices and runmygig;
access rules so that a Gig's private data can be read only by its producer and the co-hosts the producer chooses;
private links that are long, random and can be reset by the producer;
rate limits and a scrambled (hashed) form of IP addresses for abuse prevention;
hosting on Google Cloud, which runs its own physical and network security.

7. Subprocessors

You authorize us to use the subprocessors on our Subprocessors page. Each one is bound to protect the data it handles and to use it only to provide its service to us. Before we add or replace a subprocessor that handles Gig Data, we update that page and email producers at least 30 days ahead, unless an urgent change is needed to keep the service running safely, in which case we tell you as soon as we can. If you object for a reasonable data protection reason, email us. If we can't resolve it, you may stop using runmygig and close your account, and we will refund any prepaid fees for the time left.

8. Breach notice

If we learn of a breach of security that leads to the accidental or unlawful loss, change, disclosure of, or access to Gig Data, we will tell you without undue delay, and within 72 hours of confirming it where we can. We will tell you what we know, what we are doing about it and what you may need to do, and update you as we learn more. We will help you with any notices the law requires you to give.

9. Requests from people

If someone asks us to see, correct or delete their information in your Gig Data, we will pass the request to you unless the law requires us to act on it directly. Taking into account how runmygig works, we will help you answer requests from people about their Gig Data. Much of this you can do yourself: you can export Gig Data from Settings, and edit or remove people from your Gigs.

10. Help with compliance

We will give you the information you reasonably need to show that we meet this DPA, such as answers to a reasonable security questionnaire once a year.

11. Deletion or return at the end

You can export your Gig Data at any time from Settings with "Export everything." When you close your account, we delete your Gig Data within 30 days of your request, except where the law requires us to keep it, and except signed documents and text consent and STOP records, which we keep as described in our Privacy Policy. If runmygig ever shuts down, the Terms give you at least 90 days' notice to export.

12. Where data is kept

Gig Data is stored by Google Cloud and our other subprocessors, which may store it in the United States or other countries where they operate.

13. How this fits with the Terms

If this DPA and the Terms disagree about Gig Data, this DPA wins. The limits of liability, governing law (California) and courts (Los Angeles County, California) in the Terms apply to this DPA. This DPA lasts as long as we hold your Gig Data.

Contact

BTTRYZN LLC · info@runmygig.com · 30 N Gould St, Ste R, Sheridan, WY 82801 · Terms of Service · Privacy Policy · Subprocessors