Data Processing
Last Updated: August 1, 2024
1. Overview
This Data Processing Addendum ("DPA") forms part of the ecomAI Terms of Service ("Agreement") between ecomAI and the User. This DPA applies to the extent that ecomAI processes Personal Data on behalf of the User in the course of providing the Services as described in the Agreement. It outlines our commitment to protecting personal data and ensuring compliance with data protection laws.
2. Data We Process
We process data that you provide to us when you use our Services. This includes, but is not limited to: account registration information (name, email), content you upload for processing (images, text prompts), and usage data. We act as a "data processor" for this information, and you are the "data controller."
3. Purpose of Processing
We process your data for the sole purpose of providing the Services as described in our Terms of Service. This includes generating AI content, providing analytics, maintaining your account, and offering customer support. We will not process your data for any other purpose without your explicit consent.
4. Legal Basis for Processing
Our legal basis for processing personal data is the performance of our contract with you (the Terms of Service). Where we process data for other purposes, we will do so based on your consent or our legitimate interests, provided these interests do not override your fundamental rights and freedoms.
5. Data Transfers
ecomAI is based in the United States. By using our Services, you consent to the transfer, processing, and storage of your information in the U.S. and other countries where we or our service providers operate. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy and applicable data protection laws, including the use of Standard Contractual Clauses for transfers of data from the EEA, UK, and Switzerland.
6. Data Retention
We will retain your personal data for as long as your account is active or as needed to provide you with the Services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You may request the deletion of your account and associated data at any time.
7. Sub-processors
We use a limited number of third-party service providers (sub-processors) to assist us in providing the Services. These include providers of hosting, analytics, and customer support. We have entered into data processing agreements with all sub-processors to ensure they provide the same level of data protection as we do. A list of our current sub-processors is available upon request.
8. Contact Us
If you have any questions about this Data Processing Addendum or our data processing practices, please contact us at privacy@ecomai.com.