Data Processing Addendum

Where you store personal data inside memory content, you are the controller and Hunta is the processor. This page summarises the standing commitments; email [email protected] for a signed copy.

• Scope & instructions. We process memory content only on your documented instructions (API calls) and to provide the service.
• Security. Per-tenant AES-256-GCM encryption, FORCE row-level security, isolated schemas, curated write path, Ed25519-signed isolation attestation you can run yourself at any time.
• Confidentiality. Access to production is limited to the operator; no human reads memory content except where required to provide support you request or by law.
• Subprocessors. Listed in the Privacy Policy and Trust Center; we give notice before adding new ones that touch memory content.
• Assistance. We support data-subject requests via fact-level deletion (supersede / invalidate / forget) and full export via API.
• Breach notice. Without undue delay after becoming aware, with what we know, to your account email.
• Deletion. On termination, tenant data is deleted within 30 days; the isolation attestation gives you cryptographic evidence of the tenancy boundary during the relationship.
• Transfers. UK/EU processing where practicable; SCCs/IDTA where a subprocessor is elsewhere.