Login
←Back to Legal

Data Processing Addendum (DPA)

Last Updated: July 1, 2025

This Data Processing Addendum ("DPA") forms part of the Terms of Service or other written or electronic agreement between you ("Customer") and Blend Lab FZE ("Darven") for the provision of services through the Darven platform (the "Agreement"). This DPA applies when Customer Data includes Personal Data, and such data is subject to applicable Data Protection Laws.

1. Roles and Responsibilities

  • Customer is the Data Controller.

  • Darven is the Data Processor and will process Personal Data on behalf of the Customer to provide the Service.

2. Nature and Purpose of Processing

Darven processes Customer Data solely to:

  • Provide, maintain, and improve the Service;

  • Perform obligations under the Agreement;

  • Comply with lawful requests or obligations.

3. Types of Personal Data Processed

Includes but is not limited to:

  • User names, contact details, role/title, uploaded documents, AI assistant interactions, and audit logs.

4. Categories of Data Subjects

  • End users of the Service;

  • Individuals whose personal data appears in uploaded content.

5. Subprocessors

Darven may engage authorized subprocessors listed at www.darven.ai/legal/subprocessors. Customer consents to Darven’s use of these subprocessors. Darven will:

  • Enter into written agreements with subprocessors ensuring equivalent data protection obligations;

  • Remain responsible for subprocessors’ actions.

6. Customer Instructions

Darven shall process Personal Data only on documented instructions from the Customer, including as specified in the Agreement and this DPA.

7. Security Measures

Darven will implement appropriate technical and organizational measures to protect Personal Data, as further detailed in the Security Addendum.

8. Personal Data Breaches

In the event of a Personal Data Breach, Darven will notify the Customer without undue delay and provide information necessary to meet any reporting obligations under Data Protection Laws.

9. Data Subject Rights

Darven will assist the Customer in responding to data subject requests to exercise their rights under applicable Data Protection Laws.

10. Data Transfers

Darven is based in the United Arab Emirates. Where applicable, data transfers will be subject to legally recognized transfer mechanisms to ensure adequate protection.

11. Deletion and Return of Data

Upon termination of the Service, Customer may request deletion or return of Personal Data. Darven will comply unless retention is required by law.

12. Audits

Upon reasonable request, Darven will provide documentation or allow for assessments to demonstrate compliance with this DPA, subject to confidentiality.

13. Governing Law

This DPA shall be governed by the laws of the United Arab Emirates. Disputes will be resolved by the courts of Dubai, unless otherwise agreed.

For questions about this DPA, contact: legal@darven.ai