Data Processing Addendum
The unusual part first: your creative content never reaches us, so there is very little to process. This addendum covers the little there is.
1. Scope and roles
Your creative content — scripts, prompts, projects, outputs and API keys — is local-first: it persists in your own browser storage and we keep no copy. We run no project database and retain none of it. When you trigger an AI action in the browser, the material that action needs is sent to the model provider you chose, and for some providers that request currently passes through our server, which forwards it without storing or logging it.
For account data (your email address), you are the data subject or controller and we act as controller of the login and licensing records needed to operate the Service.
For the purposes of this addendum, the controller is the site's individual founder (contact: support@singularityos.tech); registered identity details will be published on the Imprint page once business registration completes.
2. Subprocessors
Supabase — authentication and account records. Whop — payment processing and settlement for the Founder's Lifetime Pass. Vercel — hosting and delivery of the website and proxy.
We will update this page before adding a subprocessor that touches personal data.
3. International transfers
Subprocessors may process data outside your jurisdiction. Transfers rely on the subprocessors' standard contractual safeguards (including EU standard contractual clauses where applicable).
4. Security
Transport encryption (HTTPS/TLS) across the Service; strict content-security policy; no server-side storage of creative content or model keys by design.
5. Incidents
If a personal-data breach affecting your account data comes to our knowledge, we will notify you without undue delay at your account email, with the information reasonably available.
6. Deletion and audit
On account deletion or verified request, account records are removed, except where a payment processor must keep its own records to meet a legal obligation. Whop and Polar each retain the billing records their own accounting and tax duties require, for the periods their law prescribes; that retention is theirs, not ours, and we cannot shorten it.
Questions about processing, or a signed copy of this addendum, are available on request.