VPSGRID GDPR DATA PROCESSING ADDENDUM (DPA)

Effective Date: 10th March, 2026

This Data Processing Addendum (“DPA”) forms part of the Terms of Service between BLOCKSGENIE TECHNOLOGIES LLC, operating under the brand VPSGRID, and its customers (“Customer”).

This DPA applies when VPSGRID processes personal data on behalf of customers located in the European Economic Area (EEA), United Kingdom, or Switzerland, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Company Information

Services are provided by:

BLOCKSGENIE TECHNOLOGIES LLC
4050 Pennsylvania Ave
Ste 115 #162
Kansas City, Missouri 64111-3041
United States

Support / Privacy Contact
support@vpsgrid.net

Billing
billing@vpsgrid.net

2. Roles of the Parties

Under this agreement:

• The Customer acts as the Data Controller.
  • VPSGRID acts as the Data Processor.

The Customer determines the purposes and means of processing personal data.

VPSGRID processes personal data only to provide infrastructure services.

3. Scope of Processing

Processing activities may include:

• storage of customer data on VPS servers
  • transmission of network traffic
  • logging of system activity for security monitoring
  • account management and billing

VPSGRID does not access or process customer data beyond what is necessary to operate infrastructure services.

4. Categories of Data Subjects

Data subjects whose data may be processed include:

• customer account holders
  • end users of customer applications
  • website visitors
  • employees or clients of the customer

5. Types of Personal Data

Depending on customer usage, personal data may include:

• names
  • email addresses
  • IP addresses
  • billing details
  • authentication logs
  • application data stored by customers

VPSGRID does not determine the specific content stored by customers.

6. Processing Instructions

VPSGRID will process personal data only:

• in accordance with the customer’s instructions
  • as required to provide infrastructure services
  • as required by applicable law

Customers are responsible for ensuring they have lawful rights to process personal data.

7. Security Measures

VPSGRID implements appropriate technical and organizational measures designed to protect personal data, including:

• encrypted HTTPS connections
  • infrastructure monitoring
  • restricted administrative access
  • system authentication controls

Customers are responsible for implementing security measures within their own servers.

8. Subprocessors

VPSGRID may engage subprocessors to support service operations.

Subprocessors may include:

• datacenter providers
  • network infrastructure providers
  • payment processors such as Stripe

Subprocessors are required to maintain appropriate data protection standards.

9. Data Breach Notification

In the event of a confirmed data breach affecting VPSGRID systems, VPSGRID will:

• investigate the incident
  • take appropriate mitigation measures
  • notify affected customers where legally required

Customers are responsible for reporting breaches affecting their own hosted applications.

10. Data Retention

Personal data processed by VPSGRID will be retained only as long as necessary to:

• provide services
  • comply with legal obligations
  • maintain billing records
  • support security investigations

Customers may request deletion of personal data associated with their account upon termination of services.

11. Data Subject Rights

Where applicable under GDPR, data subjects may have rights including:

• access to personal data
  • correction of inaccurate data
  • deletion of personal data
  • restriction of processing

Requests related to VPSGRID account information may be submitted to:

support@vpsgrid.net

Requests concerning customer-hosted applications should be directed to the relevant customer.

12. International Data Transfers

VPSGRID operates infrastructure primarily in the United States.

Customers located in the EEA acknowledge that personal data may be transferred to and processed in the United States.

Such transfers may rely on appropriate safeguards permitted under GDPR.

13. Liability

Each party shall remain responsible for compliance with its respective obligations under applicable data protection laws.

Customers are responsible for ensuring lawful processing of personal data stored on VPSGRID infrastructure.

14. Termination

This Data Processing Addendum remains in effect for as long as VPSGRID processes personal data on behalf of the customer.

Upon termination of services, VPSGRID may delete or return personal data associated with the customer account as required by law.

15. Governing Law

This DPA shall be governed by the laws specified in the VPSGRID Terms of Service.