Legal
Data Processing Agreement
Last updated: September 6, 2026
This Data Processing Agreement ("DPA") describes how AppWeaver AI processes personal data on behalf of customers when acting as a data processor, in line with applicable data protection laws such as the GDPR.
1. Scope of Processing
This DPA applies to personal data that customers or their end users submit to the Service, including account details and content stored within projects.
2. Roles of the Parties
The customer acts as the data controller for personal data submitted to the Service. AppWeaver AI acts as the data processor and processes that data only on documented instructions from the customer.
3. Security Measures
We maintain technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and regular review of our security practices.
4. Sub-processing
We may engage subprocessors to assist in providing the Service, as listed on our Subprocessors page. Subprocessors are bound by data protection obligations no less protective than this DPA.
5. Data Subject Requests
Where we receive a request from a data subject relating to data we process on a customer’s behalf, we will promptly notify the customer and provide reasonable assistance in responding.
6. International Transfers
Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.
7. Requesting a Signed Copy
Enterprise customers can request a signed copy of this DPA, including any applicable annexes, by contacting our sales or legal team.