Data Processing Agreement (DPA)

The customer acts as controller, or as a processor authorized by its own customer. Meyandy LLC acts as processor, or subprocessor, for media, text, voices and other data entrusted to produce, host and deliver requested content. We remain responsible for our own account, billing, abuse-prevention and legal-obligation processing described in the Privacy Policy.

We process data only on the customer's documented instructions, expressed through the order and authorized use of the service, except where legally required; we inform the customer where the law permits. We notify the customer of an instruction we believe infringes applicable data-protection rules. Authorized personnel are bound by confidentiality and access only data needed for their task.

Operations include receipt, storage, analysis, transformation, generation, rendering, transmission and deletion. Data may include business contact details, images, voices, text and people appearing in media. The customer specifies the categories of data subjects and data, purpose and order duration in the annex. Sensitive data, health data and data used for biometric identification are outside a standard engagement and require a specific agreement before submission.

Measures include encrypted communications, session and role controls, owner-scoped data access, private storage and temporary links for non-public content, verified payment events and stronger authentication for sensitive administrative actions. Technical changes must not materially reduce the agreed protection. This agreement makes no claim of certification or insurance coverage.

Before acceptance, the parties attach the list of providers actually used, their services, processing locations and applicable safeguards. The customer authorizes the listed providers. We give at least 30 days' notice of an added or replacement subprocessor to allow a reasoned data-protection objection; an urgent change necessary for security is notified as soon as possible. If no reasonable solution is found, the parties agree to stop the affected processing. We impose corresponding data-protection obligations and remain responsible to the customer for their performance. Request the list for the annex at hello@contact.x-celant.com.

An EU server does not guarantee EU-only residency. The annexes identify transfers and their legal bases. Where required, the parties enter into the appropriate module of the European Commission's standard contractual clauses, complete their annexes and assess supplementary measures before transfer; applicable UK provisions are added for relevant data. This agreement does not represent those instruments as signed on the parties' behalf.

We reasonably assist the customer with rights requests, impact assessments and regulatory consultations, taking account of the processing and available information. We notify it without undue delay after becoming aware of a personal data breach covered by this agreement and provide available details: nature, affected data, likely consequences, measures taken and contact. Further information follows as available; the customer remains responsible for its notifications to authorities and individuals.

At the end of the engagement, the customer chooses return or deletion through the service's export and deletion facilities. Copies are deleted unless legally retained; backups follow their documented cycle and remain protected until expiry. We provide information necessary to demonstrate compliance and allow proportionate audits, including inspections by an appointed auditor, subject to confidentiality and protection of other customers. These arrangements do not limit regulatory powers.

The accepted order identifies the parties and contacts; the processing annex specifies subject matter, duration, operations, purposes, individuals and data; security, subprocessor and transfer annexes specify the applicable details. For data protection, applicable standard contractual clauses prevail, followed by this agreement and then commercial terms. Contact: hello@contact.x-celant.com.