Data Processing Addendum

Last updated: July 25, 2026

Roles

For any personal data contained in product content you submit, you are the controller and Teloz ApS (Feedlift) is the processor under Art. 28 GDPR. This DPA is incorporated into the Terms of Service for all business customers — no signature required; a countersigned copy is available on request.

Processing

Subject matter: generation of product-highlight text from submitted product content. Duration: the subscription term. Nature and purpose: transmission to the AI sub-processor, generation, optional caching of results keyed by the submitted content. Categories: product content (should not contain personal data); account/license data as described in the Privacy Policy.

Sub-processors (current)

  • Vercel Inc. — hosting/compute (EU/US)
  • Turso / ChiselStrike Inc. — database (EU region)
  • Stripe Payments Europe Ltd. — billing (EU)
  • Resend — transactional email (US/EU)
  • Google Ireland Ltd. / Google LLC — AI text generation (Gemini). Used for all standard generations.
  • Anthropic PBC — AI text generation (Claude). Used as fallback when the primary provider is unavailable.

AI requests are sent without customer identifiers and are not used to train the providers' models. Where a provider offers a zero-data-retention option, we use it.

We give 30 days' notice before adding or replacing a sub-processor; you may object on reasonable data-protection grounds.

Security and assistance

Keys and tokens are stored hashed; transport is TLS-only; access is least-privilege. We assist with data-subject requests and breach notification obligations without undue delay. On termination, license and usage data is deleted on a rolling schedule; cached generations contain no customer identifiers.