Melsun — all-in-one AI platform
    ← Back to Melsun

    Data Processing Addendum

    Last updated: July 31, 2026

    Parties

    This Data Processing Addendum ("DPA") forms part of the Terms of Service between the customer ("Controller" or "you") and Vajta Technologies Inc. ("Processor", "we", or "us"), 1111B S Governors Ave Suite 24501, Dover, DE 19904 US, for processing of personal data submitted to Melsun in connection with a paid or business use of the service.

    For consumer accounts, our Privacy Policy is the primary notice. This DPA is intended for business customers who need a processor agreement under GDPR / UK GDPR or similar laws.

    Scope and roles

    You determine the purposes and means of processing personal data you upload or generate (Controller). We process that data on your documented instructions to provide Melsun features (Processor), except where we process as an independent controller (for example account administration, billing, security, and product analytics described in the Privacy Policy).

    Nature of processing

    • Subject matter: hosting, AI inference, document analysis, storage, and related platform services.
    • Duration: for the term of your account, plus any retention required by law or the Privacy Policy.
    • Types of data: as determined by you — typically contact details, document contents, prompts, and related business records.
    • Data subjects: your employees, customers, counterparties, or other individuals whose data you submit.

    Processor obligations

    • Process personal data only on documented instructions from you.
    • Ensure personnel authorized to process personal data are bound by confidentiality.
    • Implement appropriate technical and organizational security measures (access controls, encryption in transit, monitoring, rate limiting).
    • Engage subprocessors listed on our Subprocessors page and remain responsible for their performance.
    • Assist with data subject requests, security incidents, and DPIAs where reasonably required, considering the nature of processing.
    • Delete or return personal data after account deletion, subject to legal retention and backup rotation described in the Privacy Policy.
    • Make available information reasonably necessary to demonstrate compliance, including through this DPA and security documentation.

    Your obligations

    You warrant that you have a lawful basis to submit personal data to the service, that you will not submit special-category data unless legally permitted and necessary, and that your use complies with applicable privacy and trade laws.

    International transfers

    Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other lawful mechanisms. Contact admin@melsun.ai for transfer details applicable to your deployment.

    Security incidents

    We will notify you without undue delay after becoming aware of a personal data breach affecting your Controller data, and provide information reasonably available to help you meet your notification obligations. See also Security & Vulnerability Disclosure.

    Liability and precedence

    Liability under this DPA is subject to the limitations in the Terms, except where prohibited by applicable data-protection law. If there is a conflict between this DPA and the Terms regarding data protection, this DPA controls.

    Governing law

    This DPA is governed by the State of Delaware, United States, without limiting mandatory data-protection rights that cannot be waived.

    Contact

    To request a countersigned copy or raise a processing question, email admin@melsun.ai.