Data Processing Addendum (DPA)
This Data Processing Addendum ("DPA") supplements the Tayeno Terms of Service and applies where Tayeno processes personal data on behalf of business customers ("Controllers") in the United Kingdom or European Economic Area.
1. Scope and Processing Details
Subject Matter: Provision of AI chief-of-staff services (email triage, meeting prep, drafting).
Duration: The duration of the active subscription plus a 30-day post-termination deletion buffer.
Data Subjects: Customer's employees, correspondents, clients, and prospective business contacts.
Categories of Data: Names, email addresses, email message headers & bodies, calendar event metadata, publicly accessible company web data.
2. Obligations of Processor (Tayeno)
- Process personal data strictly on documented instructions from the Controller.
- Ensure all personnel and subprocessors are bound by statutory confidentiality duties.
- Maintain technical measures including AES-256-GCM vault encryption, per-tenant Linux isolation, and outside-LLM secret resolution.
- Notify the Controller without undue delay and in any event within 24 hours upon becoming aware of any confirmed personal data breach.
- Delete or return all customer personal data upon termination of the subscription.
3. Sub-Processors & International Transfers
Controller grants general authorization for Tayeno to engage the sub-processors listed in our Privacy Policy (Cloudflare, Inc. (Pages, Workers, R2), OpenRouter, Inc., OVHcloud, DeepSeek (Hangzhou DeepSeek AI Co., Ltd.), Replicate, Inc., Resend, Stripe Payments UK Ltd, Telegram FZ-LLC). Inference prompts and email processing requests are routed via OpenRouter, Inc. or transmitted directly to DeepSeek API infrastructure; image generation requests are dispatched to Replicate, Inc. only on Controller's instruction. International transfers outside the UK/EEA are conducted under UK International Data Transfer Addendums (IDTA) / Standard Contractual Clauses (SCCs), or explicit consent under UK GDPR Article 49(1)(a) provided upon mailbox connection. Tayeno will notify Controller of any intended changes to sub-processors at least 14 days in advance.
4. Processor Information & Legal Notices
Processor Entity: Clint Bailo (trading as Tayeno)
Trading & Correspondence Address: Tayeno, The Bristol Office, 2nd Floor, 5 High Street, Westbury-on-Trym, Bristol, BS9 3BY, England
ICO Registration: Registered with the UK Information Commissioner's Office under data protection registration reference ZC228768
Data Protection Contact: [email protected]
Note: This address is a registered commercial correspondence office for postal and legal service. It is not open for unscheduled public visits.