Legal

Data Processing Agreement

How Seranova processes personal data on your behalf as a processor under GDPR and similar laws.

Last updated: November 2025

This Data Processing Agreement applies when Seranova, operated by HRZ Solutions, LLC DBA Dream Beyond Technologies, LLC, processes personal data on your behalf as a processor under applicable data protection laws, including GDPR.

1. Roles of the Parties

  • You are the controller of the personal data you provide to Seranova.
  • HRZ Solutions, LLC DBA Dream Beyond Technologies, LLC acts as the processor when handling that data for you.
  • Both parties agree to comply with applicable data protection laws for the personal data covered by this Agreement.

2. Subject Matter and Purpose

  • The subject matter of processing is the personal data you upload or send to Seranova in connection with review automation and communication services.
  • The purpose of processing is to provide, maintain, and improve those services, including AI analysis and reporting.
  • The duration of processing is the term of your use of Seranova unless longer retention is required by law.

3. Types of Data and Data Subjects

  • Data may include names, contact details, identifiers, and review content.
  • Data subjects may include your customers, staff, and other individuals whose data appears in reviews or interactions.
  • In some cases, data may include protected health information when you use Seranova in a healthcare context.

4. Processor Obligations

  • We process personal data only on your documented instructions, including those in this Agreement and your use of the platform.
  • We ensure that personnel who process personal data are bound by confidentiality obligations.
  • We implement technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, or access.
  • We assist you, where reasonable, with fulfilling your obligations to respond to data subject requests and manage data protection impact assessments.
  • We notify you without undue delay after becoming aware of a personal data breach affecting your data.

5. Subprocessors

  • We may engage subprocessors to deliver hosting, infrastructure, analytics, AI, and support services.
  • We require subprocessors to enter into written agreements offering no less protection than this Agreement.
  • You authorize our use of subprocessors as long as we maintain these safeguards.

6. International Data Transfers

  • Personal data may be stored and processed in countries outside your own jurisdiction.
  • Where required, we use appropriate safeguards such as standard contractual clauses or similar mechanisms.

7. Data Subject Requests

  • If we receive a request from a data subject that relates to your data, we will notify you when legally allowed.
  • We will provide reasonable assistance so you can respond to the request in line with applicable laws.

8. Return and Deletion of Data

  • At the end of the services, you may request export or deletion of personal data stored in Seranova.
  • We delete or return personal data as required, unless we must retain it for legal or regulatory reasons.

9. Priority of Terms

If there is a conflict between this Data Processing Agreement and the main Terms of Service regarding data protection, this Agreement will prevail to the extent of the conflict.

Seranova AI