Data Processing Agreement
Last updated 2026-09-20
This page summarises the data processing terms we offer to business customers. It is a summary, not the agreement itself — enterprise customers receive a signature-ready DPA. Email support@dccmcp.com to request one.
1. Roles
For the paid plans, you are the controller of any personal data processed through the service and DCCMCP acts as your processor. Where we process data for our own purposes — billing, support, security — we act as an independent controller and our privacy policy applies.
On the Community edition the integrations run entirely on your hardware, so no personal data is processed by us at all.
2. Scope of processing
Processing is limited to what is needed to provide the service: account and licence administration, support requests you send us, and — only if you enable audit export — the tool-call records you choose to transmit.
- Categories of data subject: your named users and the contacts you give us.
- Categories of personal data: name, work email, organisation, role, and licence or authentication identifiers.
- Customer content: never. Scene, model, layer, image and file-path data stay in your environment.
- Duration: for the term of the agreement, then deletion or return as described in section 5.
3. Security measures
The technical and organisational measures are described in our security overview: least privilege by default, encryption in transit, hashed tokens, append-only audit logs and no outbound connectivity requirement for the local servers.
4. Sub-processors
We use a short list of sub-processors for website hosting, email delivery and payment handling. They are listed on the sub-processors page, and we give notice before adding one that processes customer personal data.
5. Deletion and return
On termination you can export your configuration and audit records, and we delete personal data we hold within 30 days, except where law requires longer retention for accounting or tax purposes.
6. International transfers
Where personal data is transferred outside your region we rely on appropriate safeguards such as standard contractual clauses. Enterprise deployments can be configured to keep all data inside your own network.
7. Assistance
We assist with data subject requests, security questionnaires and impact assessments relating to the service. Email support@dccmcp.com and we will respond within the period required by your agreement.
This document is a plain-language baseline written for technical review and is not legal advice. Enterprise order forms, a DPA and negotiated terms take precedence where they apply. Questions: support@dccmcp.com.