Data Processing Addendum
Effective date: September 16, 2026 · Nova Scotia, Canada
This addendum applies when Styla processes personal information contained in Customer Content on behalf of a business customer under applicable privacy law.
1. Roles and scope
For Customer Content that contains personal information, the customer acts as the controller or equivalent business, and Styla acts as a processor or service provider acting on the customer’s documented instructions. The customer is responsible for a lawful basis, notices, consents and responding to individuals where required.
2. Processing instructions
Styla will process Customer Content only to provide, secure and support the service; comply with law; and act on the customer’s documented instructions, unless prohibited by law. The nature of processing includes storage, retrieval, AI-assisted analysis and generation requested through the product, and export of results.
3. Confidentiality and security
Styla limits access to Customer Content to personnel and providers who need it to operate the service and who are subject to confidentiality obligations. Styla uses reasonable safeguards appropriate to the nature of the processing.
4. Subprocessors
Styla uses subprocessors for hosting, storage, authentication, workflow execution and AI functionality, including Supabase, Vercel, Inngest and OpenAI. We may replace or add subprocessors when reasonably necessary to operate the service, subject to appropriate contractual safeguards.
5. Assistance, incidents and deletion
Taking into account the nature of processing, Styla will provide reasonable assistance with privacy inquiries and security incidents relating to Customer Content. On termination or deletion request, Styla will delete or return Customer Content where feasible, subject to legal obligations, security needs and backup-retention cycles.
6. Contact
For a business-specific data-processing agreement or privacy question, contact contact@styla.ca.