1.Purpose
This Data Processing Addendum applies where Open Foundry processes personal data on behalf of a customer and acts as a processor under applicable data protection laws.
2.Roles of the Parties
Depending on the circumstances, Open Foundry may act as either a controller or processor.
3.Processing Instructions
Open Foundry shall process personal data only on documented instructions from the customer unless otherwise required by law.
4.Confidentiality
Open Foundry shall ensure that persons authorised to process personal data are subject to confidentiality obligations.
5.Security
Open Foundry shall implement reasonable technical and organisational measures designed to protect personal data.
6.Subprocessors
Open Foundry may use subprocessors including cloud hosting, analytics, communications and AI providers. A current list of key subprocessors is available upon request.
7.International Transfers
International transfers of personal data will be subject to appropriate safeguards in accordance with applicable law.
8.Data Subject Rights
Open Foundry shall provide reasonable assistance to customers responding to data subject requests.
9.Deletion and Return of Data
Upon termination of the Services and upon request, Open Foundry will delete or return personal data unless retention is required by law or reasonably necessary for operational, backup or dispute resolution purposes.
10.Contact
Questions regarding this Data Processing Addendum may be directed to privacy@openfoundry.app.