Data Processing Addendum

This DPA forms part of the agreement between the Customer ("Controller") and Buyer Mode AI ("Processor") and applies whenever the Processor processes personal data on behalf of the Controller.

1. Subject matter & duration

Provision of the Buyer Mode AI service for the duration of the subscription.

2. Nature & purpose

Hosting, indexing, and serving AI responses based on Customer knowledge and visitor messages.

3. Categories of data subjects

Customer's employees, end-user visitors of Customer's websites.

4. Categories of personal data

Contact details, conversation transcripts, IP addresses, account identifiers.

5. Processor obligations

• Process only on documented instructions from the Controller.
• Ensure personnel are bound by confidentiality.
• Implement appropriate technical and organisational measures (see Security overview).
• Engage subprocessors only under written terms providing equivalent protection.
• Assist with data subject requests, DPIAs, and breach notification within 72 hours of awareness.
• Delete or return personal data at the end of the engagement.

6. Subprocessors

Current list available in our Privacy Policy §5. We notify Customers of material changes.

7. International transfers

We rely on Standard Contractual Clauses (Module 3) where applicable.

8. Signing

Email legal@buyermode.ai to receive a counter-signed PDF version of this DPA.