Business Data Processing Addendum

This Business Data Processing Addendum applies where a business customer uses Yoruvi to process personal data in customer content. The customer is the controller (or upstream processor), and Yoruvi is the processor (or subprocessor) for that content. Yoruvi remains an independent controller for billing, account management, fraud prevention, security and legal compliance.

• Process customer personal data only on documented instructions, including service configuration, unless law requires otherwise.
• Ensure confidentiality of authorised persons and implement appropriate technical and organisational security measures.
• Engage subprocessors under written protective terms and give notice of changes via the Subprocessors page where practical.
• Assist with applicable transfer mechanisms, data-subject requests, impact assessments and prior consultations, taking account of the nature of processing.
• Notify the customer without undue delay after becoming aware of a personal-data breach affecting customer personal data.
• Delete or return customer personal data at the end of the service relationship, subject to legal retention and backup cycles.
• Make reasonably necessary compliance information available and allow audits as agreed in writing; remote questionnaires are preferred.

You confirm you have a lawful basis — and where required, the person's permission — for any third-party personal data (including faces, voices and likenesses) you upload or generate with. The AI & Acceptable Use Policy applies to all such content.

You authorise the providers listed on the Subprocessors page for the processing necessary to deliver the service. We will provide notice of material changes where practical. Raise objections at hi@yoruvi.com so we can discuss a reasonable resolution.

Subject matter: AI generation, editing, storage and projects. Nature: hosting, transmission, transformation, retrieval, support, security and deletion. Duration: your service term and permitted wind-down, subject to legal retention and backup cycles.

Data may include names, identifiers, images, video, audio, voices, likenesses, prompts and other information you submit. Data subjects may include your users, staff, clients, contractors and content subjects. The platform is not intended for deliberate processing of special-category data unless a feature expressly supports it.

This addendum is governed by the laws of England and Wales. Questions: hi@yoruvi.com.