Data Processing Agreement

This Data Processing Agreement ("DPA") is entered into between:

Customer, acting as a Data Controller under the EU General Data Protection Regulation (GDPR),

and

Briavent Ltd., registered in Bulgaria, with its registered office at str. Ruse 5, 9000 Varna,VAT ID: BG208049154, ("Processor").

This DPA is effective as of the date the Customer installs or subscribes to the App on the Atlassian Marketplace and supplements the Marketplace Partner Terms.

1. Subject Matter

This DPA governs the Processor's processing of personal data on behalf of the Customer in relation to the use of LaTeX Helper for Confluence ("the App") as offered on the Atlassian Marketplace.

2. Nature and Purpose of Processing

Processor provides LaTeX rendering functionality and processes data only for the purpose of converting LaTeX mathematical expressions into visual representations and delivering the App features.

3. Categories of Data Subjects and Data

Data Subjects: Users of the Customer's Atlassian Confluence instance.

Types of Personal Data:

LaTeX mathematical expressions entered by users.
No sensitive personal data is intentionally collected or processed.

4. Processing Location

LaTeX expressions are temporarily processed through Google Cloud Run services located in the Europe region (europe-west3). All persistent data storage occurs exclusively within Atlassian's Forge
platform infrastructure according to their data residency policies. No personal data is stored by the Processor.

5. Processor Obligations

The Processor shall:

Process personal data only under documented instructions from the Customer.
Implement appropriate technical and organizational measures to ensure data security.
Ensure that personnel authorized to process personal data are bound by confidentiality.
Assist the Customer in responding to data subject requests.
Notify the Customer without undue delay of any personal data breach.
Process data only for the duration necessary to render LaTeX expressions.

6. Sub-Processors

Processor engages the following sub-processors:

Google Cloud Platform - for LaTeX rendering service infrastructure (Cloud Run)
Atlassian - for Forge platform hosting and data storage

The Processor ensures all sub-processors comply with GDPR obligations. Updates to sub-processors will be communicated through the App's documentation.

7. Data Retention and Deletion

The Processor does not persistently store personal data. LaTeX expressions are processed transiently for rendering purposes only, with temporary caching for performance optimization (maximum 15 minutes). All persistent storage of configuration and LaTeX expressions occurs within Atlassian's systems. Upon termination of the Customer's use of the App, no action is required as no data is
retained by the Processor.

8. Technical and Organizational Measures

The Processor implements:

HTTPS encryption for all data transmissions
Temporary processing only, with no persistent storage
Access controls and monitoring for the rendering service
Regular security updates and patches

9. Audit Rights

Upon reasonable request, Processor shall provide documentation or information necessary to demonstrate compliance with this DPA, subject to confidentiality obligations.

10. Data Protection Contact

For data protection inquiries related to this App email info@briavent.com

11. Liability

Liability relating to data processing shall be governed by the Atlassian Marketplace Partner Terms and applicable data protection laws.

12. Governing Law

This DPA is governed by the laws of the Republic of Bulgaria and the GDPR, subject to the jurisdiction of Bulgarian courts.

13. Acceptance

This DPA is deemed accepted upon app installation or subscription by the Customer and requires no separate signature. This DPA forms an integral part of the agreement between the Customer and Processor for the use of the App.

Last Updated: 16.06.2025 Version: 1.0