Data Processing Addendum

This Data Processing Addendum ("DPA") applies where MulinBox Labs LLC ("Processor", "we") processes personal data on behalf of the customer ("Controller", "you") in providing Hummingbird API (the "Service"), and forms part of the Terms of Service.

1. Roles and Scope

With respect to personal data you submit through the Service, you are the data controller and we are the data processor. We process such data only on your lawful instructions and for the purpose of providing the Service.

2. Nature of Processing

The subject matter is the content you submit in requests and related metadata; the purpose is routing requests, billing, security, and maintenance; the duration is the term of the Service and any legally required retention.

3. Sub-processors

You authorize us to engage sub-processors to provide the Service, including:

Upstream AI model providers (processing forwarded Inputs to generate Outputs);
Payment processors (processing payment-related data);
Cloud/hosting providers (hosting the Service).

We will require sub-processors to undertake data-protection obligations no less protective than this DPA.

4. Security Measures

We apply appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, least privilege, and audit logging.

5. Data Subject Requests

We will provide reasonable assistance for data subject requests (access, correction, deletion, etc.) to help you meet your obligations as controller.

6. Breach Notification

Upon becoming aware of a security incident involving personal data, we will notify you without undue delay and provide reasonable information needed for you to meet your notification obligations.

7. International Transfers

Where cross-border transfers occur, we will use a transfer mechanism recognized by applicable law (such as Standard Contractual Clauses).

8. Deletion and Return

Upon termination of the Service, except where retention is legally required, we will delete or anonymize personal data processed for you within a reasonable period.

9. Contact

For matters relating to this DPA, contact support@fnuu.net.