Draft pending counsel review — not yet in force

Data Processing Addendum

This DPA applies where your organization is a controller of personal data processed in Winnows and forms part of the Terms.

Roles

Your organization is the controller of the data your team enters; Star Hero AI LLC is the processor, acting on your documented instructions (the service’s functionality).

Subprocessors

Listed in the Privacy Policy (AWS, Neon, Stripe, Google, Sentry). We will give notice before adding subprocessors that handle customer content.

Security & assistance

We apply the measures described in the Privacy Policy’s Security section, assist with data-subject requests via export and deletion tooling, and will notify you without undue delay of a personal-data breach affecting your organization.

Deletion

On termination, data is deleted after the 90-day export window, and on written request sooner.