Processing details
Version 2026-10-12.
Your subscription is governed by the Standard Contract for AWS Marketplace and its Data Processing Addendum. Where that addendum and the law ask for the details of our processing, these are they. Supervillain Software Group is the processor, or service provider; you are the controller, or business. A private offer may set its own terms.
The processing
Section titled “The processing”Purpose, which is also the business purpose under the CCPA: providing Rhino Relay on your instructions, which means storing and managing your contacts, sending your email campaigns and tests, recording their results, and running your imports and exports.
Duration: your subscription, then offboarding: 30 days of normal service after your last license ends, then 90 days read-only, then deletion within 30 days.
Data subjects: your contacts, and your console users (your staff).
Personal data:
- Your contacts: email address, the custom fields and tags you set, consent records, and engagement events (sends, deliveries, opens, clicks, bounces, complaints and unsubscribes). They’re stored in your own AWS account. Our functions read and write them there, in memory, while they work.
- Your console users: email address and sign-in method, stored by us.
Location: our service and the data we store about your account are in the United States. Your contacts are stored in your own AWS account, in the Region you chose.
Security measures: Security and Data handling.
Sub-processors: Sub-processors.
International transfers
Section titled “International transfers”Where the EU or UK GDPR requires a transfer mechanism for your data, we’ll sign the EU Standard Contractual Clauses (Module 2, controller to processor) and the UK Addendum, with these details as their annexes. Email support@rhinorelay.com.
We don’t sell or share personal data we process for you, retain, use or disclose it outside our direct business relationship with you or for any purpose other than the purpose above, or combine it with personal data from other sources, except as the CCPA allows a service provider. We’ll tell you if we can no longer meet our obligations under the CCPA, and you may take reasonable steps to stop and remediate unauthorized use of the data.
Notices
Section titled “Notices”Send notices about these details or the addendum to support@rhinorelay.com.