Data Processing Agreement
When this applies
This agreement applies when you use Outclass for a business and your content includes personal data of other people (for example customer names or photos in a design). For that data you are the controller (data fiduciary) and we process it on your behalf as processor (data processor). It forms part of the Terms of Service and applies automatically; to get a countersigned copy, write to support@outclass.design.
Details of processing
- Subject matter and duration: providing Outclass for as long as your account exists.
- Nature and purpose: storing, displaying and generating designs from your content, and sending it to AI providers to do so.
- Personal data: whatever you put in prompts, uploads and designs.
- Data subjects: people whose data appears in your content.
Our commitments
- Process the data only on your documented instructions, which are these terms and your use of the service.
- Make sure everyone who processes it is bound to confidentiality.
- Apply the measures in the Security and Data Protection.
- Use only the providers on the Subprocessors, give at least 30 days' notice of new ones, and let you object.
- Help you answer data subject requests and with impact assessments, as far as reasonable.
- Notify you without undue delay, and within 72 hours, of a personal data breach affecting your data.
- Delete or return your data when the account ends, except records the law requires us to keep.
- Make available the information needed to show compliance, and allow one audit a year, at your cost, on 30 days' notice.
International transfers
Transfers outside India, the EU or the UK are covered by the mechanisms described in the Privacy Policy. Where the GDPR requires, the EU Standard Contractual Clauses (module two or three, as applicable) and the UK Addendum apply between us.
Your commitments
You confirm you have a lawful basis, and any notices and consents required, for the personal data you put into Outclass, and you don't upload special categories of data or children's data.