Data Processing
Whether PEWIT Labs processes personal data on behalf of your business, and the terms when it does.
1. Content on your site
The plugins run on your server. Content processed with AI features goes directly from your site to the AI provider you configured. PEWIT Labs does not receive or store it, so for that content we are not your processor. Your data processing agreement for it is with the AI provider (OpenAI, Anthropic or Google).
2. License and site data
Data the plugins send to Freemius for licensing and updates (site URL, admin email, versions) is processed by us as controller, as described in the Privacy Policy, with Freemius as our processor.
3. When we act as your processor
We act as your processor only when you give us access to your site or send us data for support, for example an administrator account or a database export. In that case the following terms apply (Art. 28 GDPR):
- we process the data only to provide the support you asked for and on your documented instructions;
- people with access are bound by confidentiality;
- we apply appropriate security measures: individual accounts, encrypted connections, access limited to the time needed;
- we do not use further processors other than our hosting and email providers listed in the Privacy Policy; we will tell you before adding one, and you may object;
- we help you respond to data subject requests and meet your security obligations;
- we report a personal data breach to you without undue delay, no later than 48 hours after we become aware of it;
- when support ends we delete the data or return it, and remove our access;
- we give you the information needed to show compliance and allow reasonable audits.
If you need a signed agreement, write to kontakt@pewit.pl and we will send these terms for signature.