Skip to content

Data Processing Addendum

A plain-language summary of how we process personal data for your organisation. Businesses that need a signed agreement can ask for one.

Last updated 24 September 2026

This is a plain-language template. It will be reviewed by a lawyer before launch and may change. If anything here is unclear, email us and we'll explain it.

Who does what

Your organisation decides what personal data goes into its workspace and why. In data protection terms you are the controller and we are your processor.

What we promise

  • Only on your instructions. We process your workspace's personal data only to provide the service you signed up for, and as the law requires.
  • Confidentiality. Everyone on our team who can reach your data is bound to keep it confidential.
  • Security. We keep the measures described on our Security page, including encryption, sealed secrets, audited staff access and zero data retention for AI.
  • Subprocessors. We only use the companies on our Subprocessors page, under written terms that protect your data, and we update that page before we add one.
  • Helping with requests. If people ask to see, correct or delete their data, we help you answer them.
  • Telling you about breaches. If a breach affects your data, we tell you without undue delay and give you what you need to act.
  • No training, no selling. We never sell your data or use it to train AI models.

At the end

A workspace owner can download a full copy of the workspace and delete it themselves, in Settings, then Your data (or ask us). Deleted workspaces can be restored for 30 days and are then removed for good, stored files included, apart from anything the law makes us keep.

International transfers

We store your data in the United States. Where data protection law needs it for transfers from the UK, EU or elsewhere, the signed DPA includes the Standard Contractual Clauses.

Get a signed DPA

Email us from your work address with your organisation's legal name and address. We'll send the full agreement, with Standard Contractual Clauses, for you to sign.

Request a signed DPA (support@giveusaproject.com)