Data Processing Addendum

Effective date: July 6, 2026 · Soraz is operated by ZYGOTE AI INC

This DPA applies where Soraz processes personal data on your behalf and you are subject to the GDPR, UK GDPR, or similar law. It forms part of the Terms of Service.

1. Roles

You are the data controller of personal data you submit to or generate with the service; ZYGOTE AI INC is the processor and processes such data only on your documented instructions as expressed through the service.

2. Scope of processing

Subject matter: operation of Soraz. Duration: the term of your subscription plus deletion windows. Nature and purpose: a B2B lead-discovery tool that finds, verifies, and grades local and regional business contacts. Data subjects: your business contacts and prospects. Categories: names, business contact details, business-related correspondence.

3. Subprocessors

We use subprocessors listed in the Privacy Policy (hosting, payments, email infrastructure). We will give notice of subprocessor changes; you may object on reasonable data-protection grounds.

4. Security and confidentiality

We apply appropriate technical and organizational measures: encryption in transit, access controls, isolation of customer data, and least-privilege access limited to personnel bound by confidentiality.

5. Assistance, deletion, audits

We assist you with data-subject requests and security-incident notifications without undue delay. On termination we delete or return personal data within 30 days, subject to legal retention duties. We make available information reasonably necessary to demonstrate compliance.

6. International transfers

Where personal data of EU/UK residents is transferred outside the EEA/UK, the EU Standard Contractual Clauses (and UK Addendum) are incorporated by reference.

Contact

ZYGOTE AI INC, Unit 805, 1 Boolee Street, Reid ACT 2612, Australia.
Questions: legal@soraz.ai