Change note: from 2026-10-21, this Addendum names both service operators: Praxis Global Limited (知行環球有限公司, Hong Kong) for customers outside Mainland China, and Nanjing Deep Practice Artificial Intelligence Technology Co., Ltd. (南京深度实践人工智能科技有限公司) for customers in Mainland China.
This Data Processing Addendum applies when we process personal data on behalf of an organization, enterprise, or developer customer under the Terms of Service or a separate agreement. If a signed agreement conflicts with this Addendum, the signed agreement controls.
"We" in this Addendum means the operating entity that provides the service to the customer under Section 1 of the Terms of Service: Praxis Global Limited (知行環球有限公司, Hong Kong) for customers outside Mainland China, and Nanjing Deep Practice Artificial Intelligence Technology Co., Ltd. (南京深度实践人工智能科技有限公司) for customers in Mainland China.
1. Roles
For customer content and personal data submitted by or for a customer, the customer is generally the controller, business, or equivalent decision-maker, and we act as processor, service provider, or equivalent service operator. For account administration, billing, security, abuse prevention, compliance, diagnostics, and platform operations, we may act as an independent controller or business as permitted by law.
2. Processing instructions
We will process customer personal data to provide, secure, support, bill, troubleshoot, and improve the service; to comply with law; and as otherwise instructed by the customer through the agreement, product configuration, API calls, or documented settings. We will not sell customer personal data or use it for cross-context behavioral advertising.
3. Confidentiality and security
We will restrict personnel access to those with a business need and confidentiality obligations. We will maintain reasonable technical and organizational measures designed to protect customer personal data against unauthorized access, destruction, loss, alteration, disclosure, or misuse.
4. Subprocessors
The customer authorizes us to use subprocessors needed to provide the service, including hosting, storage, model inference, payment, support, security, communications, and analytics providers. We remain responsible for subprocessors' processing under the applicable agreement and will provide subprocessor information through the Praxis Trust Center.
5. International transfers
Where required, the parties will use appropriate transfer mechanisms for international transfers, which may include contractual safeguards, customer instructions, regional configurations, or other lawful mechanisms. Customers are responsible for determining whether their use requires additional transfer documentation.
6. Assistance
Taking into account the nature of processing and available information, we will reasonably assist customers with data subject requests, security incidents, deletion or return of data, DPIA support, and regulator inquiries where required by law and the customer's agreement.
7. Deletion and return
Upon termination or written request, we will delete or return customer personal data in accordance with product functionality, backup cycles, legal obligations, security needs, and legitimate archival requirements.