Sayweek

Data Processing Agreement (GDPR Art. 28)

Effective: 2026-09-29 · Concluded between the customer (controller) and MAD Consulting L.L.C-FZ (processor) by accepting the Terms. A signed copy is available on request: info@madconsulting.ae · Magyar változat

1. Subject and duration

The processor processes the personal data the customer puts into Sayweek (posts, ideas, calendar and e-mail excerpts, client feedback) solely to provide the Sayweek service, for the duration of the subscription.

2. Categories of data and data subjects

Account holders and team members (name, e-mail, sign-in data); people mentioned in the customer's content, calendar or e-mails (names are masked before AI processing where configured); the customer's clients using approval links (name, comments).

3. Obligations of the processor

  • Processes data only on the customer's documented instructions; never for its own purposes and never to train AI models.
  • Confidentiality: only personnel bound by confidentiality have access, and only for support and incident handling.
  • Security (Art. 32): HTTPS, encrypted access tokens (AES-256-GCM), strict per-workspace isolation, audit log, two-factor sign-in, regular updates.
  • Notifies personal data breaches without undue delay, at the latest within 48 hours of becoming aware.
  • Assists the customer with data subject requests (export, erasure) and with data protection impact assessments where required.
  • At the end of the subscription deletes all data (from backups within 30 days) and, on request, provides an export beforehand.

4. Sub-processors

Vercel Inc. (hosting), Neon Inc. (database, EU region), Anthropic PBC (AI text), OpenAI / Google (transcription and images, optional), Postiz (scheduling), Stripe (payments), Resend (e-mail). The processor notifies new sub-processors 30 days in advance; the customer may object and terminate. Transfers outside the EU/EEA rely on the European Commission's Standard Contractual Clauses.

5. Audits

Once a year the customer may request written information about the security measures; on-site audits by prior arrangement and at the customer's cost.

6. Contact

MAD Consulting L.L.C-FZ, Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. · info@madconsulting.ae

Data Processing Agreement (DPA) – Sayweek