Data Processing Addendum

Last updated 14 October 2026.

This Data Processing Addendum (DPA) is a starting draft for business customers. It is not a signed contract until countersigned. Enterprise customers: email sales@aisam.app.

1. Roles

You are the controller of personal data in your workspace (members, viewer emails in Inbox, channel content). AISAM (the Service) is the processor for that data, and a controller of account and billing data needed to operate the Service.

2. Processing

We process personal data only to provide the Service described in the Terms: planning, reviewing, rendering and publishing videos; billing; security; and support. We do not sell personal data or use customer content to train models unless you opt in.

3. Sub-processors

We use the sub-processors listed at /subprocessors. We will notify Enterprise customers of material changes where required by the order form.

4. Security

Encryption in transit (TLS), secrets at rest for OAuth and webhook credentials, access control by workspace role, rate limits, and an activity ledger. Details available under an NDA for Enterprise security reviews.

5. Assistance

We help you respond to data-subject requests (access, export, deletion) using Studio tools and support at privacy@aisam.app. Deletion of a workspace completes within 30 days (backups within 90).

6. International transfers

Where data leaves your region, we rely on appropriate safeguards (provider SCCs or equivalent) as documented with each sub-processor.

7. Term

This DPA lasts for the term of your paid subscription (or free workspace) and survives as needed for deletion and legal retention.

Questions: legal@aisam.app · Terms · Privacy · Acceptable use