Terms that apply when SiteGPT processes personal data on your behalf under GDPR and similar laws.
Last updated July 5, 2026
This Data Processing Addendum ("DPA") forms part of the Terms of Service between the customer ("Controller") and SiteGPT by Omazy ("Processor") and applies where we process personal data on your behalf. To countersign a copy for your records, email legal@sitegpt.omazy.ai.
You are the Controller of personal data contained in the content you connect and in visitor conversations. We act as your Processor and process that data only on your documented instructions, which include your configuration of the Service.
| Item | Detail |
|---|---|
| Purpose | Provide the SiteGPT agent, answering and lead capture |
| Duration | For the term of the subscription |
| Data subjects | Your website visitors and end-users |
| Data types | Content you connect; messages, and any details visitors share |
You authorize us to engage sub-processors (hosting, LLM inference, analytics, email, payments) under written terms no less protective than this DPA. We maintain a current list and will give notice of changes so you can object on reasonable grounds.
We maintain technical and organizational measures appropriate to the risk, including encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, network isolation, and logging. See our Security overview.
We will assist you, taking into account the nature of processing, in responding to requests from data subjects to exercise their rights. Most requests can be actioned directly by deleting sources or conversations in the dashboard.
We will notify you without undue delay after becoming aware of a personal-data breach affecting your data, and provide information reasonably needed for you to meet your obligations.
On termination, we will delete or return personal data within 30 days, unless retention is required by law.
Where personal data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses (and the UK Addendum where applicable) or another lawful transfer mechanism.
We will make available information reasonably necessary to demonstrate compliance with this DPA and allow for audits under reasonable, confidential arrangements.
Email legal@sitegpt.omazy.ai for a signed copy or questions.
