Data Processing Addendum

DPA for business Users (GDPR Art. 28). Effective 22 July 2026.

Parties: this Data Processing Addendum ("DPA") forms part of the Terms of Service between the business User ("Controller") and ADVELES GLOBAL LLC ("Processor", "Operator"). It applies whenever the User uploads Content containing personal data of third parties (e.g. meeting participants) and the Operator processes that data on the User's behalf.

1. Subject matter and duration

The Processor processes personal data contained in Content solely to provide the Service (AI meeting summary and task extraction, with a supporting transcript) for as long as the User uses the Service, or until deletion is requested.

2. Nature and purpose of processing

Audio transcription, speaker diarization, AI-based summarization and task extraction, and storage of the Content and derived materials in the User's library.

3. Categories of data subjects and data

Data subjects: the User and other meeting participants whose voices are recorded. Data categories: voice recordings and any personal data spoken during the meeting and captured in the transcript or summary.

4. Sub-processors

The Processor uses the sub-processors listed in the Privacy Policy §5, engaged for the purposes described there (speech recognition, language-model processing of the transcript, payment processing, message delivery, e-mail delivery, and — with the Controller's analytics consent — web and server-side analytics via Google (United States), covered by the EU-US Data Privacy Framework and, where applicable, the EU Standard Contractual Clauses). For transfers to sub-processors in the United States the mechanism is appropriate contractual protection (Standard Contractual Clauses or an equivalent data-processing agreement), where applicable: directly with OpenRouter and, where connected, Zoom; OpenAI is engaged by OpenRouter as its sub-processor and is covered through OpenRouter's arrangements. For DeepSeek (reached via OpenRouter, processed in the People's Republic of China) there is no adequacy decision and the transfer relies on OpenRouter's contractual safeguards together with supplementary technical measures. The Processor remains responsible for each sub-processor meeting data-protection obligations equivalent to this DPA.

Advertising measurement is out of scope of this DPA. The search-advertising measurement described in the Privacy Policy §5 (Google Ads) is not carried out on the Controller's behalf and is not a sub-processing activity under this DPA: it concerns visitors of the public website before any account exists, depends on those visitors' own cookie consent, and Google acts there as an independent controller under its own terms.

The Processor may engage a new sub-processor or replace an existing one — in particular the language-model provider used via OpenRouter — by updating the list in Privacy Policy §5. The Processor will give the Controller reasonable advance notice of such changes; the Controller may object on reasonable data-protection grounds by contacting legal@meetresult.app, in which case the parties will work in good faith to address the objection, which may include the Controller ceasing to use the Service.

5. Processor obligations

• Process personal data only on the Controller's documented instructions (i.e. to provide the Service);
• Ensure the confidentiality of personnel with access to the data;
• Implement appropriate technical and organisational security measures;
• Assist the Controller in responding to data subject requests, to the extent reasonably possible;
• Delete or return Content on termination, at the Controller's request;
• Notify the Controller without undue delay of any personal data breach it becomes aware of.

6. International transfers

See Privacy Policy §6 (Cross-border data transfer) — data may be transferred to sub-processors outside the Operator's country of registration, always over an encrypted channel.

7. Audits

The Processor provides reasonably requested information to demonstrate compliance with this DPA; given the Service's scale, on-site audits are not offered — documentation review is provided instead.

8. Liability

Liability under this DPA is subject to the limitation of liability set out in the Terms of Service.

9. Contact

Data protection requests: legal@meetresult.app.