Data Processing Addendum

Last updated: July 1, 2026

This is placeholder text and not legal advice. Replace with reviewed legal copy before launch.

This addendum forms part of the agreement between Upscale (processor) and you (controller) when we process personal data on your behalf.

1. Roles

You are the data controller and Upscale is the data processor for personal data you submit to the services.

2. Processing scope

We process personal data only on your documented instructions and for the purpose of providing the services.

3. Security

We maintain appropriate technical and organizational measures, including encryption in transit and at rest and access controls.

4. Sub-processors

We use vetted sub-processors under written terms and will inform you of changes so you can object.

5. Data subject requests

We assist you in responding to data subject requests and in meeting your obligations under applicable law.

6. Breach notification

We notify you without undue delay after becoming aware of a personal data breach affecting your data.

7. Deletion & return

On termination we delete or return personal data, except where retention is required by law.