This DPA applies where Omer Gokhan Ates processes personal data on your behalf as your processor (the inspection/property/tenant data you upload). It is incorporated into the Terms. A counter-signable version is available on request for Team customers.
1. Scope & instructions
We process the data only to provide the Service (generating and storing reports) and only on your documented instructions. We do not use it for any other purpose and not to train AI models.
2. Sub-processors
You authorise the sub-processors listed at /subprocessors (notably Anthropic for AI text generation, and our hosting provider). We will give notice of changes and you may object.
3. Security, confidentiality, assistance
We apply appropriate technical and organisational measures (hashing, access control, unguessable share tokens, ownership checks), keep staff under confidentiality, and assist you with data-subject requests and security/breach obligations. We will notify you without undue delay after becoming aware of a personal-data breach affecting your data.
4. International transfers
Where data is transferred outside the EEA/UK/Türkiye (e.g. to Anthropic in the US), appropriate safeguards apply (SCCs / UK Addendum / applicable KVKK ground — to be finalised by the operator/lawyer).
5. Deletion
On termination or on your request, we delete the relevant data, including photos on disk, except where retention is required by law (e.g. billing records once billing is live).
This is a summary; the full Art. 28 DPA with security annex must be finalised with legal review.