Data processing agreement

This DPA is between the UsageMill customer (“you”) and Media Yard LLC (“we”, the processor), a United States limited liability company that operates UsageMill at https://usagemill.com. New Jersey is our place of establishment. Postal address: Media Yard LLC, PO Box 73, Pennsauken, NJ 08110. Contact hello@usagemill.com. It is incorporated into the Terms when you use the API or dashboard. You do not need a wet signature for it to apply. For a countersigned copy, email hello@usagemill.com from the account email. The legal hub lists every policy we publish.

It is meant to satisfy Article 28 UK GDPR (as defined in the UK Data Protection Act 2018), Article 28 EU GDPR, and, where California law applies to that processing, CCPA/CPRA service-provider terms.

Roles

If you determine the purposes and means of the processing of usage events and related identifiers, you are the controller and Media Yard LLC is the processor.

If you process that data on behalf of another controller, you are the processor and we are the sub-processor. Module Three of the 2021 EU SCCs applies instead of Module Two.

For your account email, magic-link session, API-key hashes, and Stripe billing identifiers for UsageMill Pro and Scale (Stripe is not used for UsageMill subscription billing on Starter), Media Yard LLC is the controller. That pile is described in Privacy, not here.

Your Stripe credentials (CostSlice / OpenAI-key analogy)

Invoice-item and metered-usage writes into your Stripe account use your Stripe credentials under your Stripe agreement. You are the merchant of record for invoices to your end customers. Stripe’s processing of those end customers is not Media Yard processing as controller, and Stripe is not our subprocessor of the usage pile for that path. We store the credentials you configure so the daily cron can call Stripe on your documented instruction. That is analogous to CostSlice forwarding a customer’s own OpenAI API key: the third-party platform relationship is yours. Separately, Stripe may process Media Yard’s own Pro/Scale subscription billing where we are the controller — that is account data, not this DPA’s subject matter.

Subject matter

Running the UsageMill ledger: ingest, store, aggregate, display usage events, and — on your instruction via configuration — send quantities to Stripe as invoice items or metered subscription lines. Duration: the life of the workspace plus any short backup window. Nature: receive, store, aggregate, display, optionally transmit quantities to Stripe via your credentials. Purpose: so you can meter usage and invoice in Stripe. Types of data: meter configuration, usage events (meter, quantity, timestamp, idempotency key, identifiers you choose to send), aggregates, and Stripe mapping identifiers you configure. Data subjects: whoever appears in an identifier you send — typically your end customers or users. You instruct us not to use that pile for Media Yard’s own product research or advertising. Do not submit special-category data or PHI unless you have a lawful basis and accept that UsageMill is not HIPAA certified.

Annex 1 populates SCC Annex I.A, I.B and I.C.

Instructions

You instruct us to process processor data only to ingest, store, aggregate, display, and — when Stripe is configured — write quantities to your Stripe account for the life of the workspace, and to operate the dashboard log. We will not process it for another purpose unless UK or EU law requires it. No sale of the usage pile. No training a Media Yard model on it. If an instruction would make us break the law, we will say so in writing to hello@usagemill.com on the account.

Confidentiality and security

Technical and organisational measures are in Annex 2. We review them at least annually. We do not claim SOC 2 or HIPAA.

We will notify you without undue delay, and in any event within 48 hours of becoming aware, of a personal-data breach affecting processor data. That notice will say what happened as we know it, which categories of data are involved, what we are doing, and how to reach us.

We assist you, taking into account the nature of the processing and the information we have, with Articles 32 to 36 and with data-subject requests about processor data.

Subprocessors of processor data

Annex 3 is the list. The public copy is in Privacy.

Before a new subprocessor begins processing processor data we will update Annex 3 and Privacy and email the account owner at least 30 days in advance. You may object by writing hello@usagemill.com within that window. If we cannot accommodate the objection, you may stop sending events and close the account. We impose data-protection obligations on each subprocessor that are no less protective than this DPA, and we remain responsible to you for their performance. On request we will provide a copy of each subprocessor agreement, with reasonable commercial redactions.

Stripe (UsageMill Pro/Scale subscription billing) and Resend process account data for which we are the controller. They are not subprocessors of usage events. Your own Stripe account receives invoice writes under your Stripe agreement; it is not Media Yard’s subprocessor of the usage pile.

International transfers

Processor data is hosted in the United States. The Standard Contractual Clauses in Commission Implementing Decision (EU) 2021/914 are incorporated:

• Module Two where you are the controller; Module Three where you are a processor
• Clause 7 docking: off
• Clause 9 Option 2, 30 days
• Clause 11 optional body: off
• Clauses 17 and 18: Ireland
• Annex I.A / I.B / I.C = Annex 1; Annex II = Annex 2; Annex III = Annex 3

We have documented the Clause 14 assessment of US law for this processing, including FISA 702 and the CLOUD Act, and will make it available to you or a competent supervisory authority on request.

United Kingdom

Part 2: Mandatory Clauses of the Approved Addendum, being the template Addendum B.1.0 issued by the ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section 18 of those Mandatory Clauses.

Switzerland

References to the GDPR are read as references to the Swiss FADP, the FDPIC is the competent authority in Annex I.C for Swiss transfers, and “member state” is read so Swiss data subjects keep the right to sue in their place of habitual residence.

We are not certified under the UK–US Data Bridge or the EU–US Data Privacy Framework.

Assistance, return or delete, audits

At the end of the service, at your choice we will delete processor data or return it (export of meter configuration and usage history) and delete remaining copies, and we will certify deletion on request. Invoice and tax records we must keep contain no raw usage payloads beyond what billing requires.

Close the account by writing hello@usagemill.com from the account email, or from Settings when that control ships. Cancel plan only stops paid UsageMill billing; processing of usage data continues on Starter until you close. We answer rights emails from the account email within one month where UK or EU GDPR requires it. Backups age out. We will give you the security information we actually have. We do not run customer-directed penetration tests on shared infrastructure.

On written request no more than once in twelve months, we make available the information reasonably necessary to demonstrate Article 28. Where that is not enough, you may audit, or appoint an independent auditor who is not our competitor, on thirty days’ notice, during business hours, at your cost unless the audit finds material non-compliance.

CCPA

Where the CCPA/CPRA applies to processor data, Media Yard LLC is a service provider / contractor. We will not sell it, share it for cross-context advertising, retain, use, or disclose it except for the business purposes in Annex 1, combine it with other personal information except as those laws allow, or use it outside the direct business relationship. We will tell you if we can no longer meet those obligations.

Liability and law

Liability follows the Terms, except where UK GDPR Article 82, EU GDPR Article 82, the Clauses, or a similar rule requires a different split. New Jersey law and Camden County, New Jersey venue for the contract, without limiting those mandatory rules or the Ireland forum in the Clauses for claims the Clauses give to data subjects.

This page is not legal advice. Media Yard LLC does not have lawyers on staff.

Annex 1 — SCC Annex I.A, I.B, I.C

Annex 2 — TOMs

TLS in transit. API keys stored hashed. Stripe credentials you configure for invoice writes stored so the cron can call Stripe; rotate them if compromised. Access to processor data limited to people who run UsageMill, under confidentiality. Rate limits and the Acceptable Use Policy reduce abuse of the ingest API. We review these measures at least annually. We do not train a Media Yard model on usage events. See How we use AI.

Annex 3 — Subprocessors of processor data

This table is the list for processor data from the usage ledger. Stripe (Pro/Scale subscription billing) and Resend are account processors (we are controller), not subprocessors of usage events. Your own Stripe account receives invoice writes under your Stripe agreement; it is not a Media Yard subprocessor of the usage pile.