Legal
Data Processing Addendum
This DPA summary is intended for customers using AI(r)Drop and SPORE in a controller/processor relationship.
Processing scope
AI(r)Drop processes account identity data, contribution content, operational telemetry, and billing metadata solely to provide the contracted service.
Subprocessors
Current subprocessors may include infrastructure, analytics, and payment providers such as Stripe. Production operator documentation should maintain the current list.
Security controls
Controls include authenticated access, tenant scoping, API key hashing, endpoint throttling, audit logging, and scheduled retention enforcement for audit records.
Data subject requests
The product supports authenticated user data export and deletion endpoints to help operators fulfill access and erasure requests.