Rev. November 10, 2023
See previous versions >

Your use of Conviva Products and Services is governed by this Customer Agreement and such other commercial terms as set forth in the applicable Order Form(s) that reference this Customer Agreement and that you accept by clicking, signing or otherwise accept through an exchange of forms, or the like (all together, the “Agreement”). Your Affiliates may enter into Order Forms with Conviva, in which case the Products and Services ordered shall be provided solely to the contracting Affiliate (unless specifically agreed otherwise in the applicable Order Form) and the Affiliate, which shall be the customer for purposes of this Customer Agreement, shall be responsible for compliance with the terms of the Order Form and this Customer Agreement.

If you use the Conviva Products and Services as an employee of or for the benefit of your company, you represent that you have the power and authority to accept this Customer Agreement on behalf of your company. Your company will be the customer under this Customer Agreement. By accepting (electronically or otherwise) the terms of this Customer Agreement, or by accessing or using the Conviva Products or Services, you consent to the terms and conditions of this Customer Agreement on behalf of yourself and the company on whose behalf you will use the Conviva Products and Services. The effective date of this Customer Agreement is the date that you accept (electronically or otherwise) the terms of this Customer Agreement or the date of your first access to or use of the Conviva Products or Services, whichever occurs first. If you do not agree to the terms and conditions of this Customer Agreement or if you do not have the power and authority to accept the terms and conditions of this Customer Agreement on behalf of your company, you may not use the Conviva Products and Services and Conviva is unwilling to provide you with access to them.

PART I: TERMS

1.1 Services. Subject to the terms and conditions of this Agreement, Conviva will provide you with access to and use of the Services listed in the applicable Order Form in accordance with the terms thereof. To the extent any application program interfaces (“APIs”), libraries, software development kits (“SDKs”) or other software (collectively, “Software”) are provided or made available to you in connection with the Services, Conviva hereby grants you a limited, personal, non-exclusive, non-transferable (except as otherwise expressly permitted herein), worldwide, royalty-free license, without the right of sublicense, to use the Software for the applicable Order Form Term and for the sole purpose of integrating your player(s) (as specified in each Order Form) with the Services. You agree to work in good faith with Conviva to integrate the player(s) with the Services and to use commercially reasonable efforts to make all of your latest production player integrations accessible to Conviva solely for test purposes during the applicable Order Form Term. You may not permit a Subcontractor to access or use the Software without Conviva’s prior written consent (email sufficient by an authorized representative of Conviva), and you shall be fully responsible for and liable to Conviva for your Subcontractor’s use of the Software in compliance with the terms of this Customer Agreement.

1.2 Products. If you have ordered any Conviva data products (“Products”) as listed in the applicable Order Form, Conviva will provide you with the Products and you are hereby granted a limited, personal, non-exclusive, nontransferable, worldwide, royalty-free right and license, without the right of sublicense, to use the Products for the applicable Order Form Term and for your internal analysis purposes only.

1.3 You will establish a user name, password or other procedures for verifying that only your designated employees have access to any administrative and other functions of the Services (“Login Credentials”). You are responsible for maintaining the security of your account, passwords (including administrative and user passwords) and files, and for all uses of your account and any Software provided. You shall not share with, nor allow access to, any third party any such account or passwords, or the Software, Products or Services, without the prior written consent of Conviva.

1.4 You may not knowingly provide to any person, or export or re-export, or allow the export or re-export of, the Software, Products or Services or anything related thereto or any direct product thereof, in violation of any applicable laws or regulations or otherwise.

1.5 Authentication for Social Insights Services Only. When you register for a Social Insights account, you will be required to authenticate your social media account(s). If you do not authenticate your social media account(s), then Conviva will not be able to deliver Social Insights. Conviva will not be liable for any deficiency in providing Social Insights to the extent you do not authenticate your social media account(s). You shall remain the owner of the data transferred from your social media accounts (“User Content”). During the term of your subscription to Social Insights and thereafter, Conviva may use anonymized and aggregated extracts of the User Content solely for the purpose of providing industry-level benchmark data across pre-defined industry categories in which you and your User Content is not identified or identifiable.

1.6 Free Trials. Conviva may offer Services on a free trial basis (“Free Trial”) for a period of time specified at Conviva’s discretion, or if none stated, then thirty (30) days. If Conviva offers you a Free Trial, the specific terms of the Free Trial will be provided at the time of signup and/or in the promotional materials describing the Free Trial. Your Free Trial is subject to the terms provided therein and the terms of this Agreement. Conviva reserves the right to modify or terminate the Free Trial at any time, with or without notice, and in its sole discretion. The terms of Section 2 (Professional Services; Service Incidents; SLA), Section 5 (Payment of Fees), Section 7 (Warranties; Disclaimer) and Section 9 (Indemnification) shall not apply to your use of Free Trials. With respect to Section 8.2, all terms stated therein shall apply except that each Party’s maximum total aggregate liability arising out of or in connection with the Free Trial and this Agreement shall be limited to US$100.00.

2. Service Level Agreement; Professional Services; Service Incidents. Conviva shall provide the Services in accordance with the terms of the Service Level Agreement stated in Part II below (“Service Level Agreement”), which is incorporated by reference herein. In addition, as part of the Services, Conviva shall remotely provide integration assistance for initial integration of your player(s) as specified in the applicable Order Form, including setup, validation and revalidation (“Professional Services”). You may request Conviva’s assistance with a Service incident (“Incident”) by submitting a support ticket at https://support.conviva.com. The Incident will be classified according to the applicable Incident Level definition, and Conviva will use commercially reasonable efforts to address the Incident in accordance with this classification and the following:

Incident Level	Target Response Time
P0 (Critical)	Platinum Premium: 30 min. (24x7x365) Gold Premium: 30 min. (24x7x365) Basic Support: 30 min. (24x7x365)
P1 (Urgent)	Platinum Premium: 1 business hour Gold Premium: 2 business hours Basic Support: 4 business hours
P2 (Moderate)	Platinum Premium: 8 business hours Gold Premium: 12 business hours Basic Support: 16 business hours

Business hours are 8:00am to 6:00pm in your time zone, Monday through Friday, excluding standard Conviva holidays. You may view the status of Conviva’s response to your Service Incident reports online at https://support.conviva.com.

3. Confidentiality; Restrictions.

3.1 Confidentiality Obligations. Each party agrees to abide by the following confidentiality obligations with respect to the other party’s Confidential Information: (a) do not disclose it to any third party unless (i) the other party has given its specific and express prior written approval, (ii) the disclosure is expressly allowed under this Agreement, or (iii) the disclosure is necessary to comply with a valid court order, subpoena or is required to be disclosed by law or any regulatory or administrative body; (b) do not use it for any reason other than to exercise its rights and perform its obligation under this Agreement; and (c) protect it from unauthorized dissemination in the same manner as that party protects its own Confidential Information, and in any event with reasonable precautions (which include limiting access to employees and permitted Subcontractors on a “need-to-know” basis). If you believe you must disclose Conviva’s Confidential Information in accordance with 3.1 (a)(iii), then prior to disclosure you shall, to the extent legally permitted, promptly notify Conviva and cooperate with Conviva if Conviva chooses to contest the disclosure requirement, seek confidential treatment of the information to be disclosed, or limit the nature or scope of the information to be disclosed. Conviva will do the same if it believes it must disclose your Confidential Information in these circumstances. Each Party acknowledges that the unauthorized disclosure or use of Confidential Information may cause irreparable harm to the other Party for which recovery of money damages would be inadequate, and the other Party will therefore be entitled to apply as a right for injunctive relief to protect its rights under this Agreement, in addition to any and all remedies available at law.

3.2 Restrictions. You will not, and will not permit any third party to, reverse engineer or otherwise attempt to discover the source code or underlying structure or algorithms of the Software, Products or Services (except to the extent such restrictions are contrary to applicable law), modify or create derivative works based on the Products, Services or Software, or otherwise use the Products, Services or Software except as expressly permitted by this Agreement.

4. Intellectual Property Rights. As between the Parties, Conviva and/or its licensors own and will retain all Intellectual Property Rights in and to the Products, Services (including Service Statistics) and Software. You are hereby granted a limited, personal, non-exclusive, nontransferable, worldwide, royalty-free right and license, without the right of sublicense, to use the Service Statistics contained in the analysis exported by the Services, for the applicable Order Form Term and for your internal analysis purposes only. You shall not disclose or provide, or provide access, to any third party any Products, Services (including without limitation the Service Statistics) or Software without Conviva’s prior written consent. Your only rights in the Products, Services (including without limitation the Service Statistics) and Software are the rights expressly granted in this Agreement, and all other rights are reserved by Conviva.

5. Payment of Fees. The fees are specified in the applicable Order Form (“Fees”), which shall be invoiced as of the Order Form Effective Date. Fees are due and payable within thirty (30) days of receipt of invoice, unless specified otherwise in the Order Form. Fees unpaid after the date due are subject to a finance charge of the lesser of one and one-half percent (1.5%) per month or the maximum permitted by law. Conviva will be solely responsible for its income taxes in connection with this Agreement and you will be responsible for all sales, use and similar taxes, levies and duties imposed by the taxing authorities, if any. All Fees are exclusive of all such taxes, levies and duties. Without prejudice to any of its other rights or remedies, Conviva may restrict or suspend your access to further Software, Products and Services if payment is not made within five (5) business days of notice that payment is past due. All Order Forms are non-cancellable, and all Fees are non-refundable and non-creditable unless otherwise expressly stated in the applicable Order Form.

6. Termination. The term of this Agreement will begin on the Effective Date and will end when the last Order Form expires, unless this Agreement is terminated sooner by either party as permitted herein. Each Order Form will have its own Order Form Term. Without affecting any other right or remedy available to it, either party may terminate this Agreement or an Order Form on written notice if the other party materially breaches this Agreement or the Order Form and (where such breach is remediable) does not cure such breach within thirty (30) days after notice of such breach. In addition, either party may terminate this Agreement or an Order Form without notice upon: (a) the institution by or against the other party of insolvency, receivership or bankruptcy proceedings, (b) the other party’s making an assignment for the benefit of creditors, or (c) the other party’s dissolution or ceasing to do business. Termination of this Agreement or any Order Form shall not affect any rights, remedies, liabilities or obligations of the Parties, including the payment of amounts due or the right to claim damages in respect of any breach of the Agreement and/or Order Form, which have accrued up to the date of such termination. Upon any such termination or expiration, the provisions of Sections 3, 4, 5, 6, 7.2, 8, 9, 12, 13 and 14 shall survive and shall continue in full force and effect in accordance with their terms. For the avoidance of doubt, termination of an Order Form shall not terminate any other Order Form in effect or this Agreement, which shall continue in full force and effect in accordance with these terms.

7. Warranties; Disclaimer.

7.1 Conviva warrants that (a) the Services will operate in conformity with the description of the Services set forth in the applicable Order Form, (b) it will perform the Professional Services in a professional and workmanlike manner with employees having a level of skill commensurate with the requirements of this Agreement, (c) it will use commercially reasonable and industry standard methods to prevent the introduction of any viruses, disabling devices, Trojans, time bombs or other malicious code in the Software.

7.2 Except for the warranties in Section 7.1, Conviva hereby disclaims all warranties, conditions, representations or other terms, whether oral or written, express or implied, including without limitation all implied warranties and/or conditions of satisfactory quality, merchantability and fitness for a particular purpose.

8. Limitation of Liability.

8.1 In no event will either party, under any circumstances or any theory of liability, be liable to the other party for any indirect, punitive, incidental, special or consequential damages of any kind, arising from this Agreement, or the use of the Software, Products or Services provided to you hereunder, or the delay or inability to use the Services (including any lost revenue, sales, profits or business opportunities).

8.2 Each party’s total aggregate liability arising out of or in connection with this Agreement shall be limited to an amount equal to the Fees paid or payable by you to Conviva hereunder in the twelve (12) month period ending on the date that a claim or demand is first asserted, in each case whether based in contract, tort (including negligence or breach of statutory duty), misrepresentation, restitution, strict liability or otherwise, and even if either party has been advised of the possibility of damages. The foregoing limitations will apply notwithstanding any failure of essential purpose of any limited remedy and to the maximum extent permitted under applicable law.

8.3 The exclusions of liability in Sections 8.1 and 8.2 shall not apply to either party’s breach of Section 3.

9. Indemnification.

9.1 Conviva will, at its own expense, defend (or at its sole option, settle) any claim, suit or proceeding asserted against you by a third party that any Product, Service or Software obtained from Conviva under this Agreement directly infringes any patent, copyright, trademark or trade secret of such third party (“Claim”). Conviva will indemnify you for any damages suffered and costs reasonably incurred by you that are directly attributable to such Claim and that are assessed against you in a final, non-appealable judgment from a court of competent jurisdiction or agreed upon by Conviva in a settlement.

9.2 Notwithstanding the foregoing, Conviva will have no obligation under this Section 9 or otherwise to defend or indemnify you with respect to any Claim to the extent such Claim is based on any of the following: (i) any unauthorized use, reproduction, or distribution of any Product, Service or Software, or any breach of this Agreement by you, (ii) Conviva’s compliance with any specifications supplied by you which cannot be reasonably implemented in a non-infringing manner, (iii) any combination of any Product, Service or Software with other products, equipment, software, uses or data not supplied, authorized or required in writing by Conviva, if the Claim would have been avoided without such combination, (iv) any modification of any Product, Service or Software by any person other than Conviva or its authorized agents or contractors, if the Claim would have been avoided without such modification, or (v) continued use of the unmodified Product, Service or Software after Conviva has provided you with a work-around or modification that would have avoided the Claim without materially adversely affecting the functionality or availability of the Product, Service or Software. Further, if Conviva reasonably believes that all or any portion of any Product, Service or Software, or the use thereof, is likely to become the subject of a Claim, Conviva may elect at its discretion: (a) to procure, at Conviva’s expense, the right for you to continue using the Product, Service or Software in accordance with the terms hereof, (b) to replace or modify the allegedly infringing Product, Service or Software to make it non-infringing with at least equivalent functionality or performance, or (c) in the event the preceding is infeasible or not commercially practicable, Conviva may, in its sole discretion, terminate this Agreement or the applicable Order Form upon notice to you and refund any prepaid amounts for the affected unused Product, Service and/or Software.

9.3 Conviva’s obligations to defend and indemnify you with respect to a particular Claim are subject to the following conditions: (a) you must promptly give Conviva written notice of the Claim; (b) you must give Conviva sole control and authority over the defense and settlement of the Claim, provided that you are entitled to participate in your own defense at your sole expense; (c) you must provide Conviva with all information you have regarding the Claim and cooperate with Conviva when Conviva defends or attempts to settle the Claim; and (d) you shall whenever and wherever possible take all reasonable steps to mitigate its losses that are at the subject of the Claim. Conviva may, without your consent, settle a Claim that (i) creates no liability to you, (ii) does not impair your rights hereunder, and (iii) does not require you to make any admission of liability. Except as expressly stated in this Section 9, Conviva has no obligation or liability to you for any actual or alleged infringement related to the Software, Products or Services provided by Conviva under this Agreement.

10. Publicity/Use of Trademarks. The parties agree to work together in good faith to create and release a joint press release announcing your use of Conviva’s Products and/or Services. Also, both parties may disclose the relationship to third parties, but the details of this Customer Agreement and any Order Form hereunder will be treated as Confidential Information. In connection with its permitted activities under this Agreement, each party may use the trademarks of the other party, but only in the form and manner approved in advance in writing by the other party, and in accordance with the quality standards and usage guidelines of the other party, and only in connection with the Products and Services provided to you under the Agreement.

11. Assignment. Neither party shall have the right to assign this Agreement, except that either party may assign its rights and obligations without consent to a successor to substantially all its relevant assets or business.

12. Who You Are Contracting With, Notices, Governing Law and Jurisdiction.

12.1 General. Who you are contracting with under this Customer Agreement, who you should direct notices to under this Customer Agreement, what law will apply in any dispute or lawsuit arising out of or in connection with this Customer Agreement, and which courts have jurisdiction over any such dispute or lawsuit, depend on where you are domiciled.

If you are domiciled in:	You are contracting with (“Conviva”):	Notices should be addressed to:	The governing law is:	The courts having exclusive jurisdiction are:
People’s Republic of China, excluding Hong Kong, Macao and Taiwan	Beijing Conviva Technology Company Limited	Room 110916, Unit 1, Floor 8, Building 3, No. 1 Futong East Road, Chaoyang District, Beijing, China, post code 100000	People’s Republic of China	The people’s court with jurisdiction in Conviva’s domicile
United Kingdom or any member country of the European Union	Conviva Inc.	989 E. Hillsdale Blvd., Suite 400, Foster City, California 94404, USA	England and Wales	Courts of England and Wales
All other countries, territories and regions of the world	Conviva Inc.	989 E. Hillsdale Blvd., Suite 400, Foster City, California 94404, USA	California state law and controlling United States federal law	State courts located in San Mateo County, California, USA, or federal courts located in the Northern District of California, USA

12.2 Notices. Any notice, approval, consent or other communication intended to have legal effect under this Agreement must be given to the other party in writing and delivered by email, by express courier delivery service or by certified mail, and in each instance will be deemed given upon dispatch, provided proof of actual delivery is retained. In the event of email notice, one of the two (2) follow-up hard copy methods specified above shall be commenced within two (2) business days, and delivery is effective on email dispatch, provided proof of actual delivery of the follow-up hard copy method is retained. All notices or approvals that you send to Conviva shall be sent to its General Counsel at the address specified above, or as otherwise specified by Conviva in writing. Conviva will send all notices and approvals to you at the email address specified in the applicable Order Form. If your email address is not set forth on the applicable Order Form, then notice may be made to the email address for the primary business contact then-noticed under the Agreement, on file with either Partner or Conviva.

12.3 Governing Law and Jurisdiction. Each party agrees to the applicable governing law above without regard to choice or conflicts of law rules, and to the exclusive jurisdiction of the applicable courts above. In any action or proceeding to enforce rights under this Agreement, the prevailing party will be entitled to recover its reasonable costs and attorneys’ fees.

13. Data Protection.

13.1 You acknowledge and agree that through the installation or implementation of Conviva software development kits and/or libraries, Conviva may collect and process Personal Information in the performance of the Services for you. You further instruct and authorize Conviva, in order to perform the Services, to (i) collect and process the Personal Information, including to anonymize, aggregate and/or de-identify Personal Information to develop and enhance Conviva’s products and/or services including without limitation its machine-learning algorithms, and (ii) share the Personal Information with its Third-Party Subprocessors. Conviva shall not retain or use Personal Information other than as instructed by You or as needed to perform the Services. Conviva shall not sell or otherwise disclose Personal Information, except that Conviva may disclose Personal Information to Third-Party Subprocessors needed to perform the Services. Further, You are responsible for (a) obtaining all necessary consents from the Individuals (where applicable) and providing all applicable privacy notices and disclosures to the Individuals (as required under the Data Protection Laws) to enable Conviva to collect, process and share the Personal Information as anticipated under this Agreement, and (b) providing Conviva with instructions for processing the Personal Information that are in compliance with the Data Protection Laws. You shall indemnify, defend and hold harmless Conviva and its affiliated companies, employees, directors and agents from any claims, losses, damages, liabilities, including legal fees and expenses, arising out of or related to your violation of this Section 13.1.

13.2 Each party acknowledges that it has read and understands the Data Protection Laws and that it shall comply with the provisions and obligations imposed on them by the Data Protection Laws and this Agreement with respect to the processing of Personal Information thereunder, which processing shall be in respect of the types of Personal Information, categories of data subjects, nature and purposes, and duration, set out in this Agreement or other written instructions from you. For purposes of the California Privacy Rights Act of 2020 (“CPRA”), Conviva shall be a “Service Provider” and You shall be a “Business,” as those terms are defined in the CCPA.

13.3 You acknowledge that Conviva is reliant on you for direction regarding Conviva’s use and processing of the Personal Information. If you instruct Conviva to process Personal Information in a manner or to an extent that differs from or supplements Conviva’s standard requirements for rendering the Services, Conviva will not be liable for any claim brought by an Individual (including under the Data Protection Laws) related to such instruction. You shall be responsible for ensuring that your instructions comply with all applicable laws and regulations.

13.4 You shall promptly (and, in any event, within 7 days) notify Conviva following the receipt of: (i) a complaint, communication or notice which relates directly or indirectly to the processing of Personal Information by Conviva; or (ii) a request from an Individual to exercise its rights under the Data Protection Laws in relation to the Personal Information (“Access Requests“), and you shall verify the Access Requests before submitting them to Conviva and shall provide sufficient information to enable Conviva to take action in response to such Access Requests. If Conviva receives any Access Requests directly from Individuals, Conviva will notify you and provide reasonable assistance to you in respect of such Access Requests, and you shall be solely responsible for responding to such Access Requests. Conviva shall not be liable for any enforcement action by a DP Regulator, losses, damages or costs suffered or incurred by you in connection with any Access Request, where such enforcement action by a DP Regulator, losses, damages or costs are in any way attributable to your failure to comply with this section.

13.5 Conviva may authorize the Third-Party Subprocessors to process the Personal Information in connection with the Services and its obligations hereunder, including but not limited to the Standard Contractual Clauses. Conviva shall ensure that any such Third-Party Subprocessors only process Personal Information on the basis of a written contract which imposes on and secures from such Third-Party Subprocessors obligations in compliance with applicable Data Protection Laws and that are substantially the same as those contained in and imposed on Conviva under this Section 13. At least thirty (30) days before Conviva engages any new third-party subprocessor to carry out processing activities on Personal Information on your behalf, Conviva will update its list of Third-Party Subprocessors and provide you with an email notification provided that you have signed up at https://pages.conviva.com/WP_Conviva_Subprocessor_List_Gated_LP.html to receive such notifications. If you object to Conviva’s use of a new Third-Party Subprocessor, you shall notify Conviva promptly in writing within ten (10) business days after receipt of Conviva’s notice. In the event you object to a new Third-Party Subprocessor(s), Conviva will use commercially reasonable efforts to make available to you a change in the affected Services or recommend a commercially reasonable change to your configuration or use of the affected Conviva Offering to avoid processing of Personal Information by the objected-to new Third-Party Subprocessor without unreasonably burdening you. If Conviva is unable to make available such change within a reasonable period of time, which shall not exceed sixty (60) days, you may terminate the applicable elements of the Services which cannot be provided by Conviva without the use of the objected-to new Third-Party Subprocessor, by providing written notice to Conviva. You shall receive a refund of any prepaid fees for the period following the effective date of termination in respect of such terminated elements of the Services. You consent to Conviva’s use of Third-Party Subprocessors as described in this Section.

14. General. For all purposes under this Agreement each party shall be and act as an independent contractor and shall not bind nor attempt to bind the other to any contract. Without limiting anything herein, and except for payment obligations, neither party shall have any liability for any failure or delay resulting from any condition beyond its reasonable control, including without limitation governmental action, acts of terrorism, earthquake or other acts of God, labor conditions, power failures and utilities or telecommunications failures (collectively, “Force Majeure Events”). This Agreement and any applicable attachments and Order Forms are the entire agreement between the Parties concerning its subject matter, and supersede any prior or contemporaneous agreements, communications, or understandings (whether written or oral). Each party acknowledges that it does not rely upon any representation (whether negligent or innocent), statement or warranty made or agreed to by any person (whether a party to this Agreement or not) except those expressly set out in this Agreement and that the only remedy available in respect of any misrepresentation or untrue statement made to it shall be a claim for damages for breach of contract under this Agreement. However, any confidentiality or nondisclosure agreements that Conviva previously entered into with you will remain in effect (according to their terms) with respect to the confidential information disclosed thereunder. No waiver, change or modification to this Agreement or any Order Form will be effective unless in writing signed by both Parties. This Agreement may be amended only by means of a written instrument signed by authorized representatives of both Parties that specifically refers to this Agreement and states the Parties’ intention to amend it. No additional or inconsistent terms on any purchase order or similar document you submits to Conviva will be binding on Conviva or have any legal effect. The Parties agree that this Agreement may be signed by manual or electronic signatures and in counterparts, each of which shall be deemed an original and all of which together shall constitute one and the same instrument. In the event any provision of this Agreement shall be determined to be void, illegal or unenforceable, that provision will be limited or eliminated so that this Agreement shall otherwise remain in full force and effect and enforceable.

PART II: SERVICE LEVEL AGREEMENT
1. Availability (Uptime) Target. Conviva shall use commercially reasonable efforts to provide Availability of the Services at least 99.9% of each month (“Availability Target”).

2. Availability Calculation. “Availability” is calculated as follows: ([# of minutes in month] – [# of minutes per month Services are Unavailable]) / [# of minutes in month] x 100.

3. Notice for Planned and Emergency Unavailability. Except as otherwise agreed by the parties, Conviva will provide you with at least 72 hours advance notice (via e-mail) of all planned maintenance activities, which maintenance shall occur during a maintenance window between 10:00 PM and 02:00 AM Pacific Time on one day per week, between Monday through Thursday (primarily on Wednesday). In addition, Conviva reserves the right to undertake emergency maintenance on notice that is commercially practicable under the circumstances. Conviva shall not be liable for Unavailability during such emergency maintenance periods provided that such emergency maintenance is reasonably circumscribed.

4. Service Credits. Your sole and exclusive remedy, and Conviva’s sole and exclusive liability, in the event Conviva fails to meet the Availability Target is that Conviva will provide you with a Service Credit in accordance with the terms of this Section. To receive Service Credits, you must submit a written request to finance.ar@conviva.com within fifteen (15) days after the end of the month in which the Services were Unavailable. Conviva will credit you (or refund to you, where credit is not possible (such as for the last month of a Term)) a percentage of your effective monthly Services fee for the month affected, based on the following chart:

Availability per Month	Service Credit (as % of Effective Monthly Services Fee)
<99.9%-99.0%	5%
<99.0%-98.5%	12.5%
<98.5%-98.0%	25%
<98.0%	50%

PART III: DEFINITIONS
“Affiliate” means an entity that is controlled by, controls or is under common control with a party, where “control” means the direct or indirect ownership of more than fifty percent (50%) of the shares or interests entitled to vote for the directors thereof or the equivalent, for so long as such entitlement exists, or equivalent power over management thereof.
“Confidential Information” of Conviva means (a) the Products (in any form), Services, Service Statistics, Software, documentation, data sheets, Feedback, and all ideas and information (such as algorithms) contained or embodied in any of the foregoing; (b) the prices, discounts, payment terms, and other information in or attached to the Order Forms; and (c) any other confidential or proprietary information that Conviva provides to you in connection with this Agreement. Your “Confidential Information” means any confidential or proprietary information in (i) written form that you provide to Conviva for Conviva to fulfill your orders and its obligations under this Agreement, and (ii) oral form that you provide to Conviva in order to receive the Software, Products and Services; as long as you notify Conviva at the time of disclosure that such information is to be treated as confidential under this Agreement. Also, Confidential Information of either party does not include any of the following: (1) information that has become generally available to the public, through no fault by you (in the case of Conviva Confidential Information) or Conviva (in the case of your Confidential Information) and that is not still regarded as a trade secret under laws governing information that was negligently or maliciously distributed; (2) information that the receiving party had already obtained in a tangible form, through lawful means, before obtaining it under this Agreement; (3) information that the receiving party developed independently, without the use of any materials or information obtained from the other party in connection with this Agreement; (4) information that the receiving party has lawfully obtained, in a tangible form, from a third party that had the right to provide it to the receiving party; or (5) information that the disclosing party releases for publication in writing.
“Data Protection Laws” means any laws and regulations applicable in any relevant jurisdiction relating to privacy or the use or processing of data relating to natural persons, including without limitation: (a) any state or federal laws or regulations in the United States including without limitation the CCPA; (b) EU Directive 2002/58/EC (as amended by 2009/139/EC) and any legislation implementing or made pursuant to such directive, including (in the UK) the Privacy and Electronic Communications Regulations 2003 (“EU Directive and Legislation”); (c) EU Regulation 2016/679 (“GDPR“); (d) the GDPR as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 in the UK (“UK GDPR”); (e) the Data Protection Act 2018 in the UK (“DPA 2018”); and (f) any laws or regulations ratifying, implementing, adopting, supplementing or replacing GDPR, UK GDPR, and/or DPA 2018; in each case, to the extent in force, and as such are updated, amended or replaced from time to time.
“Feedback” means any ideas or suggestions you voluntarily provide to Conviva (in any manner, whether in writing, orally or otherwise) regarding any Software, Product or Service, including possible enhancements or improvements thereto.
“Incident Level: P0 (Critical)” means the Services are completely unavailable and/or you cannot use the Services due solely to a Services failure.
“Incident Level: P1 (Urgent)” means a significant functional component of the Services is unavailable and/or your use of such component is impaired due solely to a Services failure.
“Incident Level: P2 (Moderate)” means a non-significant functional component of the Services is unavailable and/or your use of such component is impaired due solely to a Services failure.
“Individual” means a data subject or a viewer or end user of your video services.
“Intellectual Property Rights” means all patent rights, copyrights, trade secret rights, database rights, and trademark rights (including service marks and trade names), and any applications for these rights, in all countries.
“Order Form” means a mutually-agreed writing signed by each party that provides for the purchase and sale of any Product or Service and that references this Customer Agreement, including, among other things, the licensed scope of viewer hours or views available for consumption and the licensed total peak concurrent usage (“Capacity”).
“Order Form Effective Date” is the date of last signature on an Order Form, unless expressly identified otherwise in the Order Form.
“Order Form Term” commences on the Order Form Effective Date and expires at the end of the Subscription Term identified on the Order Form.
“Personal Information” means data or information that, alone or in combination with other data or information collected, received or processed by the Services, is considered “personal data,” “personal information,” “personally identifiable information” or other such similar term as defined under the applicable Data Protection Laws, and may include, but is not limited to, Login Credentials, IP addresses, viewer and/or subscriber identifiers (such as viewer ID, subscriber ID, household ID and profile ID), device advertising identifiers (such as Google Advertising ID (GAID), Apple ID for Advertising (IDFA), Roku ID, Samsung ID and Vizio ID), geolocation information (such as latitude and longitude), and other such information or data related to an Individual’s use of your video services.
“Products” means the data reports and other products of Conviva listed in an applicable Order Form.
“Services” means the Conviva services listed in an Order Form.
“Service Statistics” means all statistics computed by the Services.
“Subcontractor” is a third party that (a) is bound by a contract with you to provide services to you, and (b) has been approved by Conviva to have access to any Software, Products, Services or other Confidential Information of Conviva in compliance with the terms of this Agreement.
“Subscription Term” means the duration indicated in each Order Form of the subscription to use the Products and Services ordered under that Order Form.
“Third-Party Subprocessors” means the sub-processors listed on Conviva’s website at https://www.conviva.com/conviva-subprocessors/.
“Unavailable” (and variations thereof) mean the Services are not available for access and use through your Internet connection, excluding the time that the Services are not available due to (a) maintenance as set forth in Section 3 of the Service Level Agreement; (b) reasons of a force majeure event or events outside Conviva’s reasonable control; (c) issues arising from misuse or mis-configuration of the Services by you or your agents, end customers or third-party contractors; and (d) your exceeding the Capacity that you have reserved in advance.
“You” (and variations thereof) means the person or entity that accepts (electronically or otherwise) the terms and conditions of this Customer Agreement as the Customer (i.e., the person or entity that uses or accesses the Conviva Products and Services).

PART IV: ADDITIONAL TERMS FOR THE UNITED KINGDOM OR EU COUNTRY MEMBERS
If you are domiciled in the United Kingdom or any member country of the European Union, then the following additional terms apply:
1. Termination. In addition to Section 6 of Part I above, either party may terminate the Customer Agreement or an Order Form without notice if the other party suspends or threatens to suspend payment of its debts or is unable to pay its debts as and when they fall due or admits inability to pay its debts or is deemed unable to pay its debts within the meaning of section 123 of the Insolvency Act 1986, or if any event occurs, or proceeding is taken, with respect to the other party in any jurisdiction to which it is subject that has an effect equivalent or similar to any of the aforementioned events.

2. Compliance with Anti-Bribery Laws. Each party acknowledges its responsibilities under the Bribery Act 2010 of the United Kingdom and represents and covenants that it has not and will not offer, give, solicit or accept any bribe from any person, organization or company with the intent to coerce or induce the other party, or an employee or agent of the other party, to act improperly in the course of its duties under the Customer Agreement.

3. Data Protection.

3.1 Sections 3, 4, 5 and 6 of this Part IV apply in the event that an EU Directive and Legislation, the GDPR, UK GDPR and/or DPA 2018 apply(ies) to this Customer Agreement and/or the Services provided hereunder. In performing the Services, Conviva shall process Personal Information on your behalf. As between you and Conviva, you are the data controller and Conviva is the data processor in relation to the processing of any such Personal Information. Conviva shall: (i) only process Personal Information for the duration of the Agreement; (ii) only process Personal Information on your behalf to provide the Products and Services; (iii) only process Personal Information on and in accordance with your instructions and as set forth in this Agreement; (iv) keep Personal Information confidential and ensure that appropriate technical and organizational measures are taken to protect against the accidental, unauthorized or unlawful destruction, loss, alteration, access or disclosure of such Personal Information; (v) not transfer Personal Information outside the European Economic Area (“EEA”) to countries whose laws the European Union has acknowledged do not ensure an adequate level of data privacy protection, without your prior written consent; (vi) not transfer Personal Information outside the United Kingdom to countries whose laws the United Kingdom has acknowledged do not ensure an adequate level of data privacy protection, without your prior written consent; (vii) delete or return the Personal Information according to your instructions (except to the extent that Conviva is required to continue to store the Personal Information); (viii) ensure that all its personnel who have access to Personal Information are subject to obligations of confidentiality when processing such Personal Information; (ix) promptly inform you if any Personal Information is (while within the Conviva’s possession or control) subject to a Personal Information breach (as defined in the Data Protection Laws); (x) provide you and any DP Regulator all information and assistance necessary to demonstrate compliance with the obligations in this Agreement; and (xi) permit your chosen independent auditor (at your sole cost) to access any relevant premises, personnel or records of Conviva on no less than 30 days prior written notice to audit and verify compliance with Conviva’s data protection obligations under this Agreement.

3.2 For purposes of Section 3.1(v) above, the parties acknowledge and agree that the provision of the Products, Services and/or Software may involve a transfer of Personal Information processed in accordance with the GDPR from you to Conviva, its Affiliates (if any) and Third-Party Subprocessors engaged in the provision of the Services and located outside the EEA (“ex-EEA Transfer”). In respect of ex-EEA Transfers and where no Alternative Adequate Level of Protection applies, Section 4 shall apply and each party shall maintain records of all processing operations under its responsibility that contain at least the minimum information required by the Data Protection Laws, and shall make such information available to any DP Regulator on request.

3.3 For purposes of Section 3.1(vi) above, the parties acknowledge and agree that the provision of the Products, Services and/or Software may involve a transfer of Personal Information processed in accordance with the UK GDPR and the DPA 2018 from you to from Conviva, its Affiliates (if any) and Third-Party Subprocessors engaged in the provision of the Services and located outside the United Kingdom (“ex-UK Transfer”). In respect of ex-UK Transfers and where no Alternative Adequate Level of Protection applies, Section 5 shall apply and each Party shall maintain records of all processing operations under its responsibility that contain at least the minimum information required by the Data Protection Laws, and shall make such information available to any DP Regulator on request.

3.4 In the event of any conflict or inconsistency between this Customer Agreement and the Standard Contractual Clauses, the Standard Contractual Clauses shall prevail to the extent of that conflict or inconsistency.

3.5 In respect of any ex-EEA Transfers or ex-UK Transfers, the following supplementary measures shall apply: (i) Conviva represents and warrants that, at the time of the transfer, it has not received any formal legal requests from any government intelligence agencies in the country to which the relevant Personal Information is being exported, for access to (or for copies of) Personal Information that has been transferred to Conviva pursuant to this Customer Agreement (“Government Agency Requests”); (ii) if, after the date of this Customer Agreement, Conviva receives any Government Agency Requests which concerns Personal Information, it will (unless prohibited by law from doing so) inform customer in writing as soon as reasonably practicable and customer and Conviva shall (as soon as reasonably practicable) discuss and determine (as permitted under law) whether all or any transfers of Personal Information pursuant to this Customer Agreement should be suspended in the light of the such Government Agency Requests; and (iii) Customer and Conviva will meet at Customer’s reasonable request as necessary to review whether: (a) the protection afforded by the laws of the country in which Conviva is located to data subjects whose Personal Information is being transferred is sufficient to provide broadly equivalent protection to that afforded in the EEA and the UK; (b) additional measures are reasonably necessary to enable the transfer to be compliant with the Data Protection Laws; and (c) it is still appropriate for Personal Information to be transferred to Conviva, taking into account all relevant information available to the parties, together with guidance provided by the DP Regulators.

4. Ex-EEA Transfers.

4.1 The provisions of this Section 4 shall apply only in respect of Personal Information which is subject to the regulation of the GDPR.

4.2 The ex-EEA Transfer shall be governed by the EU SCCs and references in the EU SCCs and in this Section 4 to the data exporter shall be Customer and references to the data importer shall be Conviva.

4.3 The EU SCCs are hereby incorporated into this Customer Agreement with the following amendments (with references in this Section 4.3 to Clauses being to Clauses of the EU SCCs):
(i) All footnotes and explanatory notes in the EU SCCs are deleted;
(ii) As the ex-EEA Transfer is a Data Controller to Data Processor transfer, only the provisions relating to Module 2 apply to such ex-EEA Transfer, and the provisions relating only to Modules 1, 3 and 4 are deleted and shall not apply to such ex-EEA Transfer;
(iii) In respect of Clause 7 (docking clause), this clause is not used;
(iv) In respect of Clause 9 (sub-processors), ‘Option 2: General Written Authorisation’ applies, and the minimum time period for the data importer to specifically inform the data exporter in writing of any intended changes to that list in accordance with Clause 9 shall be thirty (30) days;
(v) In respect of Clause 13(a) (supervision), the following wording shall apply: The supervisory authority with responsibility for ensuring compliance by the data exporter with Regulation (EU) 2016/679 as regards the data transfer, as indicated in Annex I.C, shall act as competent supervisory authority;
(vi) In respect of Clause 17 (governing law), Option 2 shall apply and the Clauses shall be governed by the law of the EU Member State in which the data exporter is established. Where such law does not allow for third-party beneficiary rights, they shall be governed by the law of another EU Member State that does allow for third-party beneficiary rights. The parties agree that this shall be the law of Ireland;
(vii) In respect of Clause 18 (choice of forum and jurisdiction), the relevant courts shall be those of the EU Member State whose law governs the Clauses in accordance with Clause 17.

4.4 Annex I of the EU SCCs shall be completed with the information set out in Annex 1 of this Customer Agreement.

4.5 Annex II of the EU SCCs shall be completed with the information set out in Annex 2 of this Customer Agreement.

4.6 Annex III of the EU SCCs shall be completed with the information set out in Annex 3 of this Customer Agreement.

5. Ex-UK Transfers.

5.1 The provisions of this Section 5 shall apply only in respect of Personal Information which is subject to the regulation of the UK GDPR and DPA 2018.

5.2 The ex-UK Transfer shall be governed by the UK SCCs which are hereby incorporated into this Section 5 with the following amendments (with references in this Section 5 to Clauses being to Clauses of the UK SCCs) and references in the UK SCCs and in this Section 5 to the data exporter shall be Customer and references to the data importer shall be Conviva.

5.3 Table 1 of the UK SCCs shall be completed as follows:
(i) The parties’ details shall be the parties and their affiliates to the extent any of them are involved in such a transfer, including those set forth in Annex 1 of this Customer Agreement.
(ii) The Key Contact shall be the contacts set forth in Annex 1 of this Customer Agreement.

5.4 Table 2 of the UK SCCs shall be completed as follows: the Approved EU SCCs referenced in Table 2 shall be the EU SCCs as set forth in Section 4 of Part IV of this Customer Agreement.

5.5 Table 3 of the UK SCCs shall be completed as follows: Annexes 1A and 1B shall be set forth in Annex 1 of this Customer Agreement. Annex II shall be set forth in Annex 2 of this Customer Agreement. Annex III shall be set forth in Annex 3 of this Customer Agreement.

5.6 Table 4 of the UK SCCs shall be completed as follows: Conviva may end this Section 5 as set out in Section 19 of the UK SCCs.

6. Additional Definitions.

6.1 “Alternative Adequate Level of Protection” means: (i) the country where Conviva or a Third-Party Subprocessor is located is recognized by the European Union (if the Personal Information is transferred from the EEA) and/or the United Kingdom (if the Personal Information is transferred from the United Kingdom) to have an adequate level of protection of personal data as described in the Data Protection Laws; or (ii) Conviva or the Third-Party Subprocessor has fully implemented binding corporate rules which provide adequate safeguards as required by the Data Protection Laws; or (iii) Conviva or the Third-Party Subprocessor has implemented any other similar program, or appropriate safeguards that are recognized by the European Union (if the Personal Information is transferred from the EEA) and/or the United Kingdom (if the Personal Information is transferred from the United Kingdom) or by the Data Protection Laws or applicable DP Regulator as providing an adequate level of protection.

6.2 “EU SCCs” means the standard contractual clauses approved by the European Commission in Commission Decision 2021/914 dated 4 June 2021, for transfers of personal data in countries not otherwise recognised as offering an adequate level of protection for personal data by the European Commission (as amended and updated from time to time).

6.3 “Ex-EEA Transfer” means as defined in Section 3.2.

6.4 “Ex-UK Transfer” means as defined in Section 3.3.

6.5 “DP Regulator” means any governmental or regulatory body or authority with responsibility for monitoring or enforcing compliance with the Data Protection Laws.

6.6 “Standard Contractual Clauses” means the EU SCCs and the UK SCCs.

6.7 “UK SCCs” means the United Kingdom Information Commissioner’s International Data Transfer Addendum to the EU Commission Standard Contractual Clauses, Version B1.0, in force 21 March 2022.

6.8 In this Customer Agreement, the terms “data subject“, “personal data“, “data controller“, “data processor” and “processing” shall have the meanings set out in the applicable Data Protection Laws.

ANNEX 1

A. LIST OF PARTIES
1. Data exporter(s):
Name: As set out in the Order Form (or as otherwise notified in writing by the data exporter).

Address: As set out in the Order Form (or as otherwise notified in writing by the data exporter).

Contact person’s name, position and contact details: As set out in the Order Form (or as otherwise notified in writing by the data exporter).

Activities relevant to the data transferred under these Clauses: Data exporter’s online video services are integrated with the data importer’s software and services.

Signature and date: Executed in accordance with the first paragraph of this Customer Agreement on page 1.

Role (controller/processor): Controller.

2. Data importer:
Name: Conviva Inc.

Address: 989 E. Hillsdale Blvd., 4th Floor, Foster City, CA 94404, USA.

Contact person’s name, position and contact details: Bradley M. Kancigor, General Counsel, +1 (650) 401-8282, legal@conviva.com

Activities relevant to the data transferred under these Clauses: Data importer provides software products and SaaS-based services for analyzing and optimizing the quality of data exporter’s online video streaming services.

Signature and date: Executed in accordance with the first paragraph of this Customer Agreement on page 1.

Role (controller/processor): Processor.

B. DESCRIPTION OF TRANSFER
Categories of data subjects whose personal data is transferred:

Data exporter’s end users that use data exporter’s websites, applications and other services that are integrated with the data importer’s services.

Data exporter’s employees that log into the data importer’s website to access the data and analytics computed by the data importer’s services.

Categories of personal data transferred:

Data exporter’s end users:

• For data importer’s Conviva for Video service: IP addresses and, at data exporter’s discretion, user, viewer and/or subscriber identifiers (such as viewer ID, subscriber ID, household ID and profile ID), device advertising identifiers (such as Google Advertising ID (GAID), Apple ID for Advertising (IDFA), Roku ID, Samsung ID and Vizio ID), geolocation information (such as latitude and longitude), and other personal data related to data exporter’s end users’ use of data exporter’s online video services;
• For data importer’s Social Insights service: the captions, comments and/or tweets that contain personal data, and other personal data and/or identifiers related to data exporter’s use of the social platform services; and
• For data importer’s Conviva for App service: IP addresses, user or subscriber identifiers, and other personal data related to data exporter’s end users’ use of data exporter’s websites, applications and other services that are integrated with data importer’s services.

Data exporter’s employees: website Login Credentials including name, email address and password.

Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures.

Not applicable.

The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous basis)

Data will be transferred on a continuous basis as required by the data exporter to receive the data importer’s services.

Nature of the processing

The Conviva for Video and Viewer Insights services provided by the data importer are passive, statistical analytics solutions, with Conviva software libraries and/or APIs integrated by data exporter as a plug-in to data exporter’s video player(s). These services enable quality of experience and viewer insights into video playback on data exporter’s video players. When a video stream is initiated, the data importer’s software computes raw technical information at the player level into service statistics and transmits these service statistics to the data importer’s SaaS platform, for data exporter to view in data importer’s front-end interface, Pulse, according to certain metrics and filters.

The Conviva for App service provided by the data importer provides real-time analytics of application experience and engagement and includes capabilities to automatically capture events, clean and normalize the ingested data, associate semantics, and report precise, comprehensive and consistent viewer experience across any device and application.

The Conviva Social Insights service provided by the data importer is an analytics solution that provides consumption and audience intelligence for video playback on social platforms. Through API calls to social platforms (including Facebook, Instagram, YouTube, Twitter and Snapchat), metrics and metadata are obtained regarding videos posted by data exporter on these social platforms.

The Conviva Precision service provided by the data importer is an active solution, with Conviva Precision software libraries and/or APIs integrated by the data exporter as a plug-in to data exporter’s video player(s). This service optimizes quality of experience of video playback on data exporter’s video player(s) using the Conviva for Video service statistics. Such optimization occurs by choosing a suitable CDN provider and optimal bitrate and resolution for the video playback under current technical and other circumstances prevailing at the time in the relevant ecosystem.

Data exporter’s employees may access the applicable service statistics, metrics and metadata by securely logging into the data importer’s website. Such Login Credentials include name, email address and password.

Purpose(s) of the data transfer and further processing

The purpose of the data transfer and further processing is for the data importer to provide software products and SaaS-based services as described above and in the Customer Agreement.

The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period

The data importer retains personal data collected from the data exporter in connection with its use of Conviva’s services, such as account Login Credentials, for as long as the data exporter’s account is active or as needed for the data importer to provide the services to the data exporter. If any personal data is collected from the data exporter’s end users (such as IP addresses and viewer ID numbers), then the data importer will retain this personal data for up to thirteen (13) months after collection, unless otherwise directed by the data exporter and/or as needed for system backup archival use. More information about Conviva’s Data Access and Retention Policy can be found in the help drop-down menu of Conviva’s Insights web portal.

For transfers to (sub-) processors, also specify subject matter, nature and duration of the processing

The data importer uses various sub-processors to support the processing carried out as described above.

C. COMPETENT SUPERVISORY AUTHORITY
Identify the competent supervisory authority/ies in accordance with Clause 13: The supervisory authority of the EU Member State in which the data exporter is established.

ANNEX 2
TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND ORGANISATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA

Description of the technical and organizational security measures implemented by the data importer in accordance with the Standard Contractual Clauses:

• The data importer (Conviva) manages and maintains its internal systems, processes, security and system alerts pursuant to industry best practices and is ISO/IEC 27001:2013 certified. All personal data collected by the data importer is transmitted over SSL and stored using logical separation for each Customer. Encryption is used to transmit data from endpoint devices to the data importer. The only ports open for inbound data are HTTP (80) and HTTPS (443) for the data importer’s SaaS application. Requests to the HTTP endpoint are redirected to the HTTPS endpoint to enforce client security. Any personal data stored in the database is encrypted utilizing AES encryption and SHA-256 hashes where possible. Industry best practice access controls, both physical and virtual, are maintained by the data importer and its vendors for data center hosting and data access. Administrative access is performed over SSH using private keys, and/or SSL for web portals, using passwords. Administrator accounts are granted only to those who need privileged access and revoked once it is no longer needed. Further, the data importer’s website used to access its SaaS application employs industry best practices for secure authentication. User access is via single sign-on and multi-factor authentication, built in a high-availability configuration, and passwords are converted to irreversible and unique hashes.
• In addition, the data exporter (Customer) shall cooperate with the data importer in establishing a password or other procedures for verifying that only designated employees of the data exporter have access to any administrative functions of the data importer’s services. The data exporter will be responsible for maintaining the security of its account, passwords (including administrative and user passwords), files, and for all uses of the data exporter’s account. The data exporter shall not share with any third party (other than its Affiliates) any such account or password without the prior written consent of the data importer.
• Additional details regarding Conviva’s security measures can be found at https://www.conviva.com/security/

ANNEX 3
LIST OF SUB-PROCESSORS

The controller has authorised the use of the sub-processors listed at https://www.conviva.com/conviva-subprocessors/.