Data Processing Agreement (DPA)

Last updated: Feb 1, 2025

This Data Processing Agreement (“Agreement”) is entered into between:

• Data Controller: The customer (“Controller”) who agrees to the Terms of Service of AtlasNova AI.
• Data Processor: AtlasNova AI, a US company with its registered office in Cupertino, CA, USA (“Processor”).

This Agreement supplements the Terms of Service and governs the processing of personal data in connection with the AI platform services provided by AtlasNova AI.

1. Subject Matter

The Processor provides AI-powered SaaS solutions and processes personal data on behalf of the Controller as described in the Terms of Service and this Agreement.

2. Nature and Purpose of Processing

The Processor processes personal data solely for delivering, maintaining, and improving its SaaS platform, including but not limited to account management, technical support, analytics, communications, and product development. Data will not be processed for any other purpose without the Controller's documented instructions.

3. Types of Personal Data and Data Subjects

Types of data: names, email addresses, login credentials, usage data, and other information entered or uploaded by the Controller's users.
Data subjects: employees, contractors, and authorized users of the Controller.

4. Obligations of the Processor

• Process data only as instructed by the Controller.
• Ensure confidentiality and require all personnel to commit to confidentiality obligations.
• Implement appropriate technical and organizational security measures.
• Assist the Controller in responding to data subject requests (e.g., access, rectification, erasure).
• Notify the Controller of any data breach without undue delay and, where feasible, within 72 hours.
• Delete or return data to the Controller upon termination of services, unless otherwise required by law.

5. Sub-Processors

The Processor may engage sub-processors for hosting, analytics, communications, and other business functions. A current list of sub-processors is available at: list of sub-processors. The Processor will ensure all sub-processors are contractually bound to data protection obligations no less protective than those in this Agreement.

6. International Transfers

If data is transferred outside the country or region of the Controller, the Processor will ensure such transfers are subject to appropriate safeguards, including Standard Contractual Clauses or other mechanisms approved under applicable data protection laws.

7. Term and Termination

This Agreement remains in effect for as long as the Processor processes data on behalf of the Controller under the Terms of Service.

8. Governing Law

This Agreement is governed by the laws of the United States of America.

This Agreement is accepted electronically as part of the Terms of Service.