Data Processing Agreement

Data Processing Agreement

Publisher. Domor Tech OÜ, a private limited company under Estonian law (osaühing), registry (Äriregister) no. 17473139, VAT EE102971707, registered office Tööstuse tn 75-71, 10416 Tallinn, Estonia. Contact: [email protected]. The platform is ANYBOT at any.bot ("we", "us").

Shared definitions. Space — your workspace. AI Agent — an assistant you build on our AI. Knowledge — files you give an Agent. Member — a person you invite to a Space. Contact / End User — someone who talks to your Agent. Content — anything you upload, enter, or generate, plus your Agents' conversations. Plan — your subscription for a Space. Anybot Tokens — the unit that measures usage. Consumer — a person acting outside a trade or profession; Business User — everyone else.

Applies where we process personal data on your behalf (your Agents' and End Users' data). It forms part of the Terms and needs no separate signature; a signed copy is available on request. In case of conflict on personal data, this DPA prevails.

1. Roles. You are the controller; we are the processor. You decide what your Agents collect and why; we process it only to provide the platform and only on your documented instructions (your Agent configuration, your use of features, and anything you tell us in writing).

2. Our duties. We keep the data confidential (staff bound to confidentiality, access limited and logged); apply the security measures in Privacy Policy §7; assist you with data-subject requests, breach notifications, and impact assessments, taking account of the information available to us; and tell you without undue delay if we become aware of a personal-data breach.

3. Sub-processors. You authorise the sub-processors in the List below. We bind each to data-protection terms no lower than these, remain responsible for them, and give you 30 days' notice of changes with a right to object.

4. Transfers. Content is hosted in the EU; model-provider requests may go outside the EEA (including China for some media features) under Standard Contractual Clauses and, where required, explicit consent — see Privacy Policy §4.

5. Data-subject requests & end of term. If one of your End Users contacts us, we forward it to you. On termination we delete or return the personal data as you choose, subject to the retention periods in the Privacy Policy and any legal-hold. On request we certify deletion.

Sub-processor List

Email delivery and error monitoring are self-hosted by Domor Tech and are not third-party sub-processors.