Draft for review: not yet final.
Data processing agreement
How Juniclip handles your prospects' personal data on your behalf (UK GDPR Article 28). Last updated 2 November 2026.
1. Roles
You (the customer) are the controller of the personal data about your prospects that you upload to Juniclip. We are your processor. This agreement forms part of our Terms of service.
2. What we process
Subject: your prospects (business contacts). Data: names, company, work email, company website, extra columns you upload, website captures, personalised videos, thumbnails and pages, AI voice audio of their name, and page viewing events. Purpose and duration: to provide Juniclip to you, for as long as you use it, subject to the 12-month deletion described in our Privacy policy.
3. Our commitments
We will: process the data only on your documented instructions (your use of the app counts as instructions); make sure our staff are bound by confidentiality; keep it secure with appropriate measures (encryption in transit and at rest, access controls, private files, unguessable page links, and read-only staff access); help you respond to people exercising their rights; tell you without undue delay, and within 48 hours, if we become aware of a personal data breach affecting your data; help you with data protection impact assessments where relevant; and delete or return the data when you delete your organisation.
4. Sub-processors
You authorise the sub-processors listed below. We'll give you at least 14 days' notice of new ones (by email or in the app), and you can object; if we can't resolve it, you can end the agreement. We hold each sub-processor to data protection terms at least as protective as these.
5. International transfers
Where a sub-processor handles data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
6. Audits
We'll give you the information you reasonably need to show we meet these obligations, and answer reasonable security questionnaires once a year.
7. Your commitments
You confirm you have a lawful basis to process your prospects' data and to contact them, that you've given them any notices the law requires, and that you'll honour their requests and opt-outs.
Sub-processors
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | Ireland (EU) |
| Vercel | Hosting the app and prospect pages | EU and US |
| Trigger.dev | Making videos in the background | EU and US |
| URLbox | Capturing prospects' public websites | EU and US |
| ElevenLabs | AI voice: your cloned voice saying prospects' names | US and EU |
| Sync Labs (sync.so) | Lip-syncing the AI voice to your video | US |
| Resend | Sending emails from the app | US and EU |
| Stripe | Payments, invoices and billing | US, EU and UK |
| Brandfetch | Company logos for prospects | EU |
Questions? Email support@juniclip.com.