Data Processing Agreement

Last updated: April 2026

This Data Processing Agreement ("Agreement") forms part of the Terms of Service and governs the processing of personal data by Sell.AI in connection with the provision of its services.

1. Parties

This Agreement is entered into between:

creatywniwsieci.pl Joanna Nowak, ul. Armii Krajowej 17/7, 76-100 Sławno, Poland (the Processor)
and
the Customer (user of the Service) (the Controller)

2. Subject Matter and Duration

This Agreement governs the processing of personal data by the Processor on behalf of the Controller in connection with the use of the Sell.AI Service. The Agreement remains in force for the duration of the Service.

3. Nature and Purpose of Processing

Processing activities may include:

• License validation
• License management
• Technical support
• Service operation and maintenance

The Processor does not process end-customer data from the Customer's WooCommerce store.

4. Categories of Data

4.1 Customer Account Data

• Email address
• Name
• Company details
• Billing information

4.2 Technical Data

• IP address
• Domain name
• License key
• System logs

5. Categories of Data Subjects

• Customer (account owner)
• Customer's employees or authorized users

6. Instructions

The Processor shall process personal data only on documented instructions from the Controller, including through the use of the Service.

7. Confidentiality

The Processor ensures that persons authorized to process personal data are bound by confidentiality obligations and receive appropriate data protection training.

8. Security Measures

The Processor implements appropriate technical and organizational measures, including:

• Encryption of data in transit
• Access controls
• Secure hosting infrastructure
• Monitoring and logging

9. Sub-processors

The Controller authorizes the Processor to use sub-processors, including:

• Payment providers (e.g. Stripe)
• Hosting providers
• Email service providers

The Processor ensures that sub-processors are bound by data protection obligations consistent with this Agreement.

10. Data Transfers

Where personal data is transferred outside the EEA, the Processor ensures appropriate safeguards, including Standard Contractual Clauses (SCCs).

11. Assistance to Controller

The Processor shall assist the Controller in fulfilling obligations related to:

• Data subject rights (access, deletion, etc.)
• Security incidents
• Data protection impact assessments (if applicable)

12. Data Breach Notification

The Processor shall notify the Controller without undue delay after becoming aware of a personal data breach.

13. Deletion or Return of Data

Upon termination of the Service, the Processor shall delete or return personal data, unless retention is required by law.

14. Audits

The Controller may request information necessary to demonstrate compliance with this Agreement.

15. Liability

Each party's liability shall be governed by the Terms of Service.

16. OpenAI and External Processing

The Service allows integration with OpenAI via the Customer's own API key.

• The Processor does not access or process data sent to OpenAI
• Data is transmitted directly from the Customer's infrastructure
• OpenAI acts as a separate data processor or controller

The Customer is responsible for compliance with OpenAI's terms and data protection obligations.

17. Governing Law

This Agreement shall be governed by the laws of Poland.

18. Contact

• Email: biuro@creatywniwsieci.pl
• Address: creatywniwsieci.pl Joanna Nowak, ul. Armii Krajowej 17/7, 76-100 Sławno, Poland