Data Processing Addendum

This Data Processing Addendum (DPA) forms part of the agreement between Skytells, Inc. and an organization using the service where Skytells processes personal data on that organization's behalf. If this DPA conflicts with the agreement on personal-data processing, this DPA controls to the extent of that conflict.

The organization is the controller and Skytells is the processor for customer personal data. Skytells will process that data only on the organization's documented instructions, including the agreement and use of the service, unless applicable law requires otherwise.

Processing may include hosting, storing, organizing, retrieving, transmitting, generating requested AI output, securing, supporting, and deleting customer personal data. The processing continues for the term of the agreement and until deletion or return is required.

Skytells will limit access to personnel and subprocessors who need it to provide the service and who are bound by confidentiality duties. Skytells will maintain appropriate technical and organizational measures designed to protect customer personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

The organization authorizes Skytells to engage subprocessors to provide the service, subject to written obligations materially consistent with this DPA. Current categories and applicable providers are described on our Subprocessors page. Where a transfer requires a recognized transfer mechanism, Skytells will use an appropriate mechanism.

Taking into account the nature of processing and information available to us, Skytells will provide reasonable assistance with data-subject requests, security assessments, and regulatory obligations. We will notify the organization without undue delay after becoming aware of a confirmed security incident affecting its customer personal data.

At the end of the service, Skytells will delete or return customer personal data in accordance with the agreement and applicable law, unless retention is legally required. On reasonable written request, we will make available information necessary to demonstrate compliance with this DPA, subject to confidentiality, security, and reasonable audit limitations.

For an executed enterprise agreement, security addendum, or processing question, contact support@relam.ai.