Data Processing Addendum

This addendum describes how AI7700 processes personal data for business customers that use AI7700 as a service provider.

1. Roles and instructions

The business customer acts as the controller for personal data submitted through its use of AI7700. AI7700 acts as processor and processes that data only to provide, secure and support the requested service, or as required by law.

2. Processing scope

Processing may include hosting, authentication, account administration, file or text processing where a feature requires it, security monitoring, support and service communications. Customers should not submit sensitive personal data unless the feature and their agreement expressly permit it.

3. Service providers

Depending on the feature, AI7700 uses Supabase, Stripe, Cloudflare, Vercel and GDPRChecker as infrastructure, payment, security, hosting or consent-management providers. Providers process data under their applicable data-processing terms and confidentiality obligations.

4. International transfers

Where personal data is transferred outside the EEA, AI7700 relies on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism where applicable.

5. Security

AI7700 applies access controls, encrypted connections, data minimisation and provider security controls. We assess and respond to suspected incidents and notify customers or authorities where required by law.

6. Retention and deletion

Personal data is retained only for the customer relationship, security, support and legal obligations. On termination, data is deleted or returned where technically and legally feasible, subject to required backup or legal retention periods.

7. Requests and contact

For data-processing questions or a request related to a business account, contact [email protected].