Data Processing Addendum

This Data Processing Addendum (“DPA”) forms part of the Terms of Service between you (the “Customer”) and Landed (“Processor”) when we process Personal Data on your behalf in connection with the Landed Services.

For account, billing, and website visitor data that we determine the purposes and means of processing, we act as an independent controller. Those activities are described in our Privacy Policy.

Subject matter. Provision of real-time coaching, transcription, meeting summaries, knowledge retrieval, and related product features.

Duration. For the term of your subscription or account, plus any retention period required by law or our Privacy Policy.

Nature and purpose. Hosting, storage, transmission, transcription, AI inference, indexing, and display of Customer Content as instructed by you through the Services.

Types of Personal Data. May include names, email addresses, audio/transcript content, meeting metadata, uploaded knowledge documents, and other content you submit.

Data subjects. Your personnel, sales prospects, and other individuals whose information appears in Customer Content.

We will:

• process Personal Data only on documented instructions from you, including via the Services configuration, unless required by law;
• ensure persons authorized to process Personal Data are bound by confidentiality;
• implement appropriate technical and organizational security measures;
• assist you, taking into account the nature of processing, with data subject requests and security/breach notifications where required;
• delete or return Personal Data upon termination of the Services when you request deletion through account controls or by emailing privacy@landed-ai.com, unless retention is required by law; and
• make available information reasonably necessary to demonstrate compliance with this DPA upon written request.

You authorize us to engage subprocessors listed at /legal/subprocessors. We will impose data protection terms on subprocessors no less protective than this DPA. We will notify you of material subprocessor changes via the subprocessors page or email where practicable.

Where Personal Data is transferred outside the UK or EEA, we rely on appropriate transfer mechanisms such as the UK International Data Transfer Agreement / Addendum, EU Standard Contractual Clauses, or an adequacy decision, as applicable to the destination and our subprocessors.

We maintain administrative, technical, and physical safeguards appropriate to the risk, including access controls, encryption in transit, and least-privilege access to production systems. If we become aware of a Personal Data breach affecting Customer Personal Data, we will notify you without undue delay and provide information reasonably available to help you meet your obligations.

You are responsible for the lawfulness of Customer Content you submit, obtaining any required notices or consents (including for call recording where applicable), and configuring the Services appropriately for your use case.

Privacy and DPA requests: privacy@landed-ai.com. Legal notices: legal@landed-ai.com. Governing law and dispute resolution follow the Terms of Service (England and Wales).