This is a template. Have it reviewed by a lawyer and adapt it to your company and your processors before you publish it.
This agreement is part of the terms of service. It applies when the customer stores personal data in Acme.
Roles
The customer is the controller of the personal data it stores in the service. Acme Ltd is its processor and processes that data only on the customer's documented instructions, which are these terms and the customer's use of the service.
What is processed
- Subjects: the customer's users and contacts, as the customer chooses.
- Data: what the customer puts in items and files.
- Purpose: storing the data and returning it through the dashboard, the API and the MCP server.
- Duration: as long as the organization exists, and its retrieval window after deletion.
Our commitments
- We process the data only to provide the service, and never for our own purposes.
- The people who can reach it are bound to confidentiality.
- We protect it with the measures listed under "Security".
- We help the customer answer a request from a data subject, and report a personal data breach without undue delay.
- At the end of the service we delete the data, after the retrieval window.
Security
- Data is encrypted in transit and at rest.
- Access to production is limited to the people who need it, with two-factor authentication.
- Each organization's data is separated from every other's in the database and in file storage.
- Backups are encrypted.
Sub-processors
The customer authorizes the following sub-processors. We tell the customer 30 days before we add or replace one, and the customer may object.
- Cloudflare, Inc.: hosting, database, file storage and email delivery.
- Stripe Payments Europe, Ltd.: payments.
- openshield: moderation of the content the customer stores, when the check is turned on.
Transfers
When a sub-processor is outside the European Economic Area, the transfer relies on an adequacy decision or on the standard contractual clauses.