Data Processing Addendum - B2B

Version 2026-08-18. The controller is the business using What We Agreed that determines the purpose and scope of processing third-party data. The processor is the Operator in the footer. Contact: klabocha@me.com.

1. Subject, purpose and duration

The controller entrusts data only for transcription, summaries, AI answers, export, security, and support. Documented instructions consist of the Terms and actions performed by an authorized user in the app. Processing lasts for the service or request, subject to legally required retention and backups.

2. Data and people

Data may include voice, name, contact details, statements, professional information, client data, and quote data. Data subjects may include clients, employees, contractors, suppliers, and other participants. Special-category or criminal-conviction data may be processed only where the controller has an appropriate legal ground and safeguards.

3. Processor obligations

The processor acts only on documented instructions, ensures confidentiality, applies transport encryption, access control, authentication, minimization and retention limits, assists with data-subject rights, breaches and DPIAs, and deletes or returns data after the service as instructed and required by law. It provides information needed to demonstrate compliance and permits a reasonable documentary audit no more than once per year unless an incident or authority requires otherwise.

4. Subprocessors and transfers

The controller gives general authorization for subprocessors needed to deliver the service, including Cloudflare, Supabase, and the selected transcription or AI-summary provider. The Operator gives advance notice of a material change and imposes equivalent obligations on subprocessors. Transfers outside the EEA use an appropriate legal mechanism and additional safeguards where required.

5. Breaches, priority and liability

The processor informs the controller of a confirmed breach without undue delay after obtaining sufficient information and provides available details needed for assessment and notification. This Addendum prevails over the Terms for processing matters. Liability follows the Terms except where data-protection law does not allow a limitation.

Polski | Privacy Policy | Terms | Support