Data Processing Agreement

Last updated: November 29, 2024

This Data Processing Agreement forms part of the agreement between Testreel OÜ and the customer using Forgemaster AI where personal data is processed on the customer's behalf.

Background

This agreement sets out the terms under which Forgemaster AI processes personal data on behalf of the customer in compliance with applicable data protection law.

Acceptance

By using the service and accepting the applicable service agreement, the customer accepts this Data Processing Agreement.

Definitions

Personal Data

Any information relating to an identified or identifiable natural person.

Processing

Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.

Subprocessor

A third-party provider engaged by Forgemaster AI to support delivery of the service.

Scope and purpose

Forgemaster AI processes personal data only to provide the contracted services and only in line with the customer's documented instructions and the applicable service agreement.

Processor responsibilities

Forgemaster AI agrees to:

  • Process personal data only on documented instructions from the customer.
  • Implement appropriate technical and organizational security measures.
  • Ensure that authorized personnel are bound by confidentiality obligations.

Subprocessing

Forgemaster AI may use subprocessors to support the service. The customer may review the categories of subprocessors involved in delivery.

List of subprocessors

ProcessorPurpose
StripePayments
BraveWeb search
OpenAILLM and model provider
AnthropicLLM and model provider
PexelsImages
UnsplashImages
GoogleAuthentication
LinkedInAuthentication
GitLabAuthentication
GitHubAuthentication

Data subject rights

Forgemaster AI will reasonably assist the customer in responding to data subject requests where required by law and technically possible.

Data breach notification

Forgemaster AI will notify the customer without undue delay after becoming aware of a personal data breach affecting customer data.

Deletion or return of data

Upon termination of the service, Forgemaster AI will delete or return personal data in accordance with the service agreement and applicable law.

Data storage and model usage

Forgemaster AI does not use customer code or customer-controlled data for general model training beyond what is necessary to provide the agreed service functionality.

Governing law

This agreement is governed by the laws of Estonia unless otherwise required by the governing service agreement.

Amendments

Any amendment to this agreement must be made in writing or through an updated service agreement accepted by both parties.

Acceptance and effect

By accepting the service agreement or continuing to use the service, the parties agree that this Data Processing Agreement applies to processing activities covered by Forgemaster AI.

Last updated: November 29, 2024