NewEvoras for AI agents
Evoras

Data Processing Addendum - Evoras

Data Processing Addendum

Last updated: 28 June 2026

This Data Processing Addendum (“DPA”) forms part of the Terms of Service between TECH RACCOONS LTD (company number 16336615), registered in England and Wales (“Evoras”, “we”, “Processor”), and the customer agreeing to those Terms (“you”, “Customer”, “Controller”).

It applies where, and to the extent that, we process Customer Personal Data on your behalf in providing the Service. If you require a countersigned copy of this DPA for your records, email legal@evoras.app.

1. Definitions

Capitalised terms not defined here have the meaning given in the Terms of Service.

“Data Protection Laws” means all laws applicable to the processing of personal data under the Terms, including the UK GDPR, the EU General Data Protection Regulation (Regulation 2016/679) (“EU GDPR”), and the Data Protection Act 2018.

“Controller”, “Processor”, “Data Subject”, “Personal Data”, “processing”, and “Sub-processor” have the meanings given in the Data Protection Laws.

“Customer Personal Data” means Personal Data contained in Customer Content that we process on your behalf.

“UK Addendum” means the International Data Transfer Addendum to the EU Standard Contractual Clauses issued by the UK Information Commissioner.

“Standard Contractual Clauses” or “SCCs” means the clauses approved under EU Commission Implementing Decision 2021/914.

2. Roles and scope of processing

As between the parties, you are the Controller and we are the Processor of Customer Personal Data. Where you are yourself a processor acting on behalf of a third-party controller, you appoint us as your sub-processor, and you confirm you have the authority to do so.

We will process Customer Personal Data only on your documented instructions, including as set out in this DPA and the Terms, and as necessary to provide and support the Service, unless required to do otherwise by law.

3. Our obligations as Processor

We will:

  • process Customer Personal Data only on your documented instructions;
  • ensure that personnel authorised to process Customer Personal Data are bound by appropriate confidentiality obligations;
  • implement and maintain appropriate technical and organisational security measures;
  • respect the conditions for engaging Sub-processors;
  • assist you in responding to requests from Data Subjects exercising their rights;
  • assist you in ensuring compliance with security of processing, breach notification, and data protection impact assessments;
  • at your choice, delete or return Customer Personal Data; and
  • make available information reasonably necessary to demonstrate compliance with this DPA.

4. Your obligations as Controller

You will: ensure you have a lawful basis for the Customer Personal Data you submit; ensure your instructions comply with Data Protection Laws; and be responsible for the accuracy, quality, and legality of Customer Personal Data.

5. Sub-processors

You grant us general authorisation to engage Sub-processors. Our current Sub-processors are listed in our Privacy Policy. We impose on each Sub-processor data-protection obligations that are no less protective than those in this DPA. We will give you reasonable notice of any intended addition or replacement of a Sub-processor.

6. International transfers

Where our provision of the Service involves transferring Customer Personal Data outside the UK or EEA to a country without an adequacy decision, the parties agree that the SCCs (for EU transfers) and the UK Addendum (for UK transfers) are incorporated into this DPA by reference and apply to that transfer.

7. Personal data breaches

We will notify you without undue delay after becoming aware of a personal data breach affecting Customer Personal Data, and will provide information reasonably available to us to help you meet your breach-notification obligations.

8. Return and deletion

On expiry or termination of the Service, we will delete or return Customer Personal Data and delete existing copies, unless retention is required by law. You can also delete sites and your account, and export your articles, directly in the Service at any time.

9. Contact

Questions about this DPA: legal@evoras.appor privacy@evoras.app.

TECH RACCOONS LTD
Registered in England and Wales
Company number 16336615