Data Processing Agreement
Last updated: 21 June 2026
Roles of the parties
For personal data processed through the service, the customer acts as the data controller and SimpleCopywriter acts as the data processor. The customer determines the purposes and means of processing; SimpleCopywriter processes personal data only on the customer's documented instructions, including as set out in this agreement and the product's terms.
Scope and purpose of processing
SimpleCopywriter processes personal data solely to provide the service: ingesting the brand documents the customer uploads, generating and reviewing website copy from them, and operating the associated account, billing, and support functions. We do not process personal data for any unrelated purpose and do not use customer documents to train models.
Sub-processors
The customer authorises SimpleCopywriter to engage the sub-processors listed on our sub-processors page to help provide the service. Each sub-processor is bound by obligations consistent with this agreement. We will maintain that list and update it as our infrastructure changes.
Security measures
SimpleCopywriter maintains appropriate technical and organisational measures, including encryption of documents at rest, Row-Level Security enforcing per-workspace isolation at the database layer, scrubbing of document content from logs and error reports, and access controls limiting who can reach production systems.
Assistance with data-subject rights
SimpleCopywriter will provide reasonable assistance to help the customer respond to requests from data subjects exercising their rights, such as access, correction, and deletion, taking into account the nature of the processing and the information available to us.
Personal-data breach notification
If SimpleCopywriter becomes aware of a personal-data breach affecting the customer's data, we will notify the customer without undue delay and provide the information reasonably needed to help the customer meet its own notification obligations.
Deletion or return on termination
On termination of the service, or on the customer's request, SimpleCopywriter will delete or return the customer's personal data, including a hard erasure of uploaded documents from storage, subject to any retention required by law.
Governing law
This agreement is governed by the laws of [JURISDICTION], and the contracting entity is [LEGAL ENTITY]. These placeholders will be completed on legal sign-off; this document is a draft pending that review.