DPA
Data Processing Addendum
A beta-ready data processing outline for business users who need controller and processor terms.
Last updated: 30 June 2026
Purpose of this DPA
This Data Processing Addendum is a beta-ready outline for business users who need terms covering personal data processed by Haplo on their behalf. It should be legally reviewed before it is used as a signed agreement.
Processing details
| Subject matter | Operation of the Haplo beta content research, generation and CMS draft workflow. |
|---|---|
| Duration | For the period the user accesses the beta or until deletion is requested, subject to legal or operational retention needs. |
| Nature and purpose | Keyword research, SERP analysis, AI-assisted drafting, CMS draft creation, beta support, debugging and security. |
| Data types | Content workflow data, prompts, keywords, competitor/SERP data, generated drafts, contact details and any personal data a user chooses to include in prompts or content. |
| Data subjects | Beta users, customer contacts, website authors or any individuals included by the user in content workflow data. |
Processor commitments
- Process personal data only on documented instructions from the user/customer.
- Use appropriate technical and organisational measures for the beta risk profile.
- Require confidentiality from people authorised to process personal data.
- Assist with data subject rights requests where reasonably possible.
- Use sub-processors only where needed to provide the service and list them on the Sub-processors page.
- Delete or return personal data at the end of the service where reasonably possible, subject to legal or security retention needs.
Customer responsibilities
- Only submit personal data that you are authorised to process through Haplo.
- Do not submit sensitive or regulated data unless it is necessary and lawful.
- Use least-privilege CMS credentials and revoke beta credentials when no longer needed.
- Review generated content before publication.