Data Processing Addendum (DPA)

GDPR Compliance Document

This DPA forms part of the Cookwise.ai Terms of Service and governs how Cookwise.ai processes personal data on behalf of users located in the European Union.

1. Roles

The user is the Data Controller and Cookwise.ai is the Data Processor.

2. Processor Obligations

• Process data only under documented instructions
• Maintain confidentiality
• Implement security measures
• Assist with data subject rights

3. Sub-processors

Cookwise.ai may use third-party sub-processors such as AWS, Vercel, Postmark, or analytics providers.

4. Data Transfers

All transfers outside the EU follow Standard Contractual Clauses (SCCs).

5. Contact

Email: privacy@cookwise.ai