Scope and instructions
This addendum forms part of the Butterspace Terms of service between Concept 27 SIA and a business customer to the extent we process personal data in its workspace on its behalf. The customer is the controller, or a processor authorized by its controller, and Concept 27 SIA is its processor or subprocessor. Account administration, our accounting and independent security obligations are covered separately in the Privacy policy.
The subject is hosting and operating the customer's kitchen workspace, including storage, retrieval, editing, sharing, import and deletion for the duration of the service and the applicable return/deletion period. Data can concern team members, suppliers and people identified in content the customer chooses to upload. It can include names, contact and business details, membership information, documents, photos and other personal information within workspace content. The service is not designed for special-category personal data.
We process this data only on the customer's documented instructions, including the agreed service features, authorized settings and requests, unless law requires otherwise. We will tell the customer about a legal requirement where permitted and notify it if we consider an instruction unlawful. The customer is responsible for the lawfulness of its instructions, notices, permissions and content.
Confidentiality, security and assistance
People authorized to process customer data must be subject to confidentiality duties. We apply measures appropriate to the risks, including encrypted network connections, authenticated access, workspace and role authorization, and restricted administration. We review measures as the service and risks change; this is not a guarantee that an incident can never occur.
We assist the customer with privacy-rights requests, security obligations, impact assessments and regulator consultations, taking account of the processing and information available to us. We notify the customer without undue delay after becoming aware of a personal data breach affecting its workspace and provide available information and updates needed for its response.
Service providers and transfers
The customer generally authorizes the providers identified in the Privacy policy for the stated functions: Supabase for database, authentication and storage; Vercel for hosting; and Google for optional Gemini imports chosen by the customer. Resend delivers email sign-in links and service emails and provides delivery-status reports; Google Workspace handles support correspondence. Stripe handles billing and can also have independent legal responsibilities. Only providers receiving processor data for a function act as subprocessors for that function.
We require relevant subprocessors to protect customer data through appropriate contractual obligations and remain responsible for their processing under this addendum as required by law. Before adding or replacing a subprocessor for customer workspace data, we will notify affected customers and give a reasonable opportunity to object on data protection grounds. If we cannot reasonably resolve an objection, the customer may stop the affected feature or end the affected service, without losing mandatory legal remedies.
International transfers must use safeguards required by applicable data protection law, such as an adequacy decision or approved standard contractual clauses. An EU database region does not exclude overseas processing by providers or their support operations. Contact help@butter.space for applicable transfer information.
Return, deletion and compliance information
At the end of processing, the customer can request return or deletion of its personal data, subject to legally required retention. Workspace exports are available on request, including after paid access ends, without repurchasing a subscription. The six-month dormancy period, protection from active paid, trial or complimentary access, renewal through connected ChatGPT use, subsequent deletion of eligible workspaces and accounts, and advance notice are described in the Privacy policy. Explicit in-app account deletion does not wait for that period. A departing member cannot order deletion of another owner's shared workspace.
When workspace reset is available, its private recovery copy includes uploaded photos and lasts up to 7 days. Recovery requires the workspace owner's verified authority and an empty destination. It does not delay explicit account deletion. Any provider backup copies remain protected until normal rotation or applicable provider retention ends and are not used to reopen a deleted workspace. Where law requires retention, processing is limited to that purpose. If a backup is restored, applicable deletion instructions must be reapplied.
We provide information reasonably needed to demonstrate compliance and allow appropriate audits or inspections by the customer or its authorized independent auditor. The arrangements must protect other customers' data, security and confidentiality. Nothing in an audit arrangement limits a regulator's powers or rights that the law requires. For data protection matters, this addendum takes priority over conflicting general service terms. Contact help@butter.space.