Data Processing Addendum

Roles

You are the controller of the personal data you upload or generate in your workspace. AskGIZA is the processor.

AskGIZA processes that data only on your instructions: to index your documents, answer your questions, operate and secure the service, and provide support you request.

Security measures

Personal data is encrypted in transit (TLS 1.2+) and at rest (AES-256), with keys managed separately from data.

Workspaces are logically isolated — retrieval only ever searches within your own documents.

AskGIZA staff access workspace content only for a documented, auditable reason such as a support request you initiated.

Subprocessors

AskGIZA uses the subprocessors listed on the Subprocessors page, each bound by a written agreement covering confidentiality and data handling.

We will announce material changes to that list before they take effect, and you may object as described in the Terms of Service.

Data subject requests

You remain responsible for responding to requests from individuals whose data you upload. AskGIZA supports you by providing deletion and export controls in the product and by assisting with requests you cannot fulfill on your own.

Deleting a document removes it and its index entries immediately. Deleting your account removes all workspace data within 30 days, except where law requires longer retention of billing records.

International transfers

AskGIZA runs on Google Cloud infrastructure. Where personal data is transferred across borders, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Duration and deletion

Processing continues for as long as your account is active or as needed to provide the service. When it ends, personal data is deleted within the windows described above.

Contact

Data protection questions can be sent to privacy@askgiza.com.