Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you (the Controller) and WuKong AI (the Processor, operating clawdbob).

1. Scope

This DPA applies when clawdbob processes Personal Data on your behalf, including but not limited to: customer-of-customer email addresses, browser session data, AI-generated outreach content addressed to identifiable individuals.

2. Subject matter & duration

Duration: matches your subscription term plus 30 days post-cancellation retention. Subject matter: see Privacy Policy §1.

3. Sub-processing

Authorized subprocessors at /subprocessors. You consent to those listed; we provide 30-day prior written notice (via email) before adding new ones. You may object within 30 days, in which case you may terminate without penalty.

4. Data subject rights

We assist you in fulfilling Articles 12–22 GDPR requests within 30 days. Use Account settings or contact privacy@clawdbob.ai for export, deletion, or rectification.

5. Security measures

Encryption at rest (AES-256-GCM), TLS 1.3 in transit, role-based access internally, audit logs, quarterly access reviews, SOC 2 readiness path active.

6. Breach notification

We notify you within 72 hours of confirmed personal data breach, including: nature, categories and number of data subjects/records affected, likely consequences, mitigation.

7. International transfers

Standard Contractual Clauses (SCCs) incorporated by reference. EU-US Data Privacy Framework participation underway.

8. Audit

You may request our SOC 2 report once available, or commission an audit at your cost on 30-day notice, max once per year.

9. Return / deletion of data

On termination we return or delete all Personal Data per your instructions within 30 days unless retention is required by law.

Contact: privacy@clawdbob.ai

Last updated May 15, 2026. Privacy requests: privacy@clawdbob.ai.