Data Processing Addendum (DPA)
This DPA forms part of the Terms of Service between you ("Customer") and Uptown4, Inc. ("Processor") for processing personal data in connection with PrivateHost.AI.
Last updated: May 8, 2026
1. Processing details
Subject matter: delivery of hosted AI agent services. Duration: for the service term and any limited post-termination retention period required for security or legal obligations. Nature and purpose: hosting, authentication, support, security, and customer-directed processing.
2. Roles and instructions
Customer is controller (or processor acting on behalf of a controller). Uptown4 is processor. We process personal data only on documented instructions from Customer, unless otherwise required by law.
3. Confidentiality and security
We maintain reasonable technical and organizational measures to protect personal data, including encryption controls for sensitive credentials, least-privilege access, and security monitoring appropriate to risk.
4. Subprocessors
Customer authorizes use of subprocessors needed to operate the Service, including cloud infrastructure and database/authentication vendors such as Supabase. We remain responsible for our subprocessors' data protection obligations under applicable law.
5. Data subject requests and incident support
We will provide reasonable assistance for verified data subject requests and will notify Customer of confirmed personal data breaches without undue delay as required by law.
6. International transfers
Where required for cross-border transfers, parties will rely on appropriate transfer mechanisms, including Standard Contractual Clauses or other lawful safeguards.
7. Return or deletion
Upon termination and subject to legal retention obligations, we will delete or return personal data in our control within a commercially reasonable timeframe.
8. Contact and execution
To request a countersigned DPA or transfer addendum package for enterprise procurement, contact [email protected].