Data Processing Addendum

Last updated: June 5, 2026

This Data Processing Addendum ("DPA") forms part of the agreement between the customer ("Controller") and Ucleva ("Processor") for the processing of personal data through the Service.

1. Subject matter and duration

Ucleva processes personal data on behalf of the Controller solely to provide the Service, for the duration of the subscription term.

2. Nature and purpose

Hosting, personalization, analytics, AI-assisted content generation, and notification delivery within the Ucleva platform.

3. Categories of data subjects

Employees, contractors, and other authorized users of the Controller's organization.

4. Categories of personal data

Identifiers (name, email), professional data (role, team), usage data, user-generated content, and any data the Controller voluntarily uploads.

5. Sub-processors

The Controller authorizes Ucleva to engage sub-processors for cloud hosting, email delivery, payments, and AI model inference. A current list is available on request from dpo@ucleva.com. We give 30 days' notice of new sub-processors.

6. Security measures

Ucleva implements the technical and organizational measures described in our Security page, including encryption in transit and at rest, RLS, access auditing, and incident response.

7. Data subject rights

Ucleva assists the Controller in responding to data subject requests (access, rectification, erasure, portability) within the timelines required by applicable law.

8. International transfers

Where data is transferred outside the EEA, UK, or other restricted jurisdictions, Ucleva relies on Standard Contractual Clauses and supplementary measures.

9. Breach notification

Ucleva notifies the Controller without undue delay (and within 72 hours where required) after becoming aware of a personal data breach affecting Controller data.

10. Return and deletion

Upon termination, Ucleva deletes or returns Controller personal data within 90 days, except where retention is required by law.

11. Audits

Ucleva makes available the information necessary to demonstrate compliance with this DPA and allows for audits, on reasonable notice and under confidentiality.

12. Contact

Data Protection Officer — dpo@ucleva.com