{"platform":"Napkin AI","slug":"napkin-ai","category":"Workflow & Automation","website":"https://www.napkin.ai","risk_rating":"medium","verification":"fully_verified","verification_detail":{"tier":"fully_verified","partial_reason_code":"none","partial_reason_label":"Complete","blocked_core_documents":[]},"rating":{"value":"medium","unknown_reason_code":"none","unknown_reason_label":"Rated"},"corpus_status":"corpus_complete","canonical":"https://airinetwork.com/platform/napkin-ai","machine_url":"https://airinetwork.com/api/machine/platform/napkin-ai","last_reviewed":"2026-07-27","findings_count":216,"findings":[{"surface":"prompt_ownership","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" User-generated content , such as input text, visuals, generated text, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20User-generated%20content%20%2C,well%20as%20associated%20metadata.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":2410,"char_end":2618,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"training_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" 7.1.3 Where the Customer has not opted out, Napkin AI may use: (a) anonymized and aggregated interaction data, from which all personal identifiers have been removed; and (b) de-identified content data (visual and diagram content from which all personally identifiable information has been removed), solely for the purpose of improving the Services and Napkin AI’s AI models (“Model Improvement Processing”). Such use shall not re-identify any individual or Customer.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.3%20Where%20the,any%20individual%20or%20Customer.","structural_citation":"§ 7.1.3","citation_basis":"section_number","char_start":17802,"char_end":18269,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"training_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 7.2.2 Zero-Data-Retention Disclosure: Napkin AI maintains zero-data-retention (ZDR) agreements with all large language model providers engaged to process Customer Personal Data. Under these agreements, Customer Personal Data submitted to those providers is not retained beyond the immediate processing request and is not used by those providers for model training, fine-tuning, or any other independent purpose.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.2.2%20Zero-Data-Retention%20Disclosure%3A,any%20other%20independent%20purpose.","structural_citation":"§ 7.2.2","citation_basis":"section_number","char_start":18764,"char_end":19176,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"training_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 7.1.1 Napkin AI shall not use Customer Personal Data for the purpose of training, retraining, fine-tuning, or otherwise developing any artificial intelligence or machine learning models.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.1%20Napkin%20AI,or%20machine%20learning%20models.","structural_citation":"§ 7.1.1","citation_basis":"section_number","char_start":17200,"char_end":17387,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" With your consent. In some cases, we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20With%20your%20consent.,when%20required%20by%20law.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":8302,"char_end":8459,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" https://www.mailmodo.com/privacy ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fwww.mailmodo.com%2Fprivacy%20","structural_citation":"Terms of Service › “Email campaign delivery”","citation_basis":"heading_path","char_start":31689,"char_end":31723,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “CCPA/CPRA” \n means the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, together with all implementing regulations. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CCCPA%2FCPRA%E2%80%9D%20means%20the,all%20implementing%20regulations.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":2063,"char_end":2230,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 8.4 Napkin AI shall promptly notify the Customer if Napkin AI determines that it can no longer meet its obligations under applicable U.S. Privacy Laws. Upon such notification, the Customer may direct Napkin AI to take reasonable steps to remediate the issue or terminate the relevant Services.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.4%20Napkin%20AI,terminate%20the%20relevant%20Services.","structural_citation":"§ 8.4","citation_basis":"section_number","char_start":20605,"char_end":20899,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Production environment isolated; web application firewall (WAF) deployed; DDoS protection enabled. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Production%20environment%20isolated%3B,DDoS%20protection%20enabled.%20","structural_citation":"Terms of Service › “Network Security”","citation_basis":"heading_path","char_start":33047,"char_end":33147,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20prevent%2C%20identify%2C%20investigate,cyberattacks%20and%20identity%20theft.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":8147,"char_end":8297,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" To exercise these rights, please contact us at [email protected] . We may request specific information from you to help us confirm your identity and process your request.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20To%20exercise%20these,and%20process%20your%20request.","structural_citation":"Privacy Policy › “Withdraw consent where it was previously given”","citation_basis":"heading_path","char_start":16040,"char_end":16216,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" This Privacy Policy describes how Second Layer, Inc. (\"Napkin,\" \"we,\" \"us\" or \"our\") processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including as applicable, our website located at https://www.napkin.ai , marketing activities, live events and other activities described in this Privacy Policy (collectively, the \"Service\")). Napkin may provide additional or supplemental privacy policies to individuals for specific products or services that we offer at the time we collect personal information.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20This%20Privacy%20Policy,we%20collect%20personal%20information.","structural_citation":"Privacy Policy › “Privacy Policy - Napkin AI”","citation_basis":"heading_path","char_start":209,"char_end":791,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Mail: Second Layer, Inc., 626 Jay Street, Los Altos, CA 94022","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Mail%3A%20Second%20Layer%2C,Los%20Altos%2C%20CA%2094022","structural_citation":"Privacy Policy › “Data Protection Officer: Erwan Martin — [email protected]”","citation_basis":"heading_path","char_start":19742,"char_end":19804,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Teamspace content: If you create content within a Teamspace, other Teamspace members may have access to that content as determined by the Teamspace Administrator.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Teamspace%20content%3A%20If,by%20the%20Teamspace%20Administrator.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":13151,"char_end":13314,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 6.5 Napkin AI shall maintain records of all confirmed Personal Data Breaches, including the facts relating to the breach, its effects, and the remedial actions taken, and shall make such records available to the Customer upon written request.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.5%20Napkin%20AI,Customer%20upon%20written%20request.","structural_citation":"§ 6.5","citation_basis":"section_number","char_start":16874,"char_end":17117,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Other%20data%20not,the%20time%20of%20collection.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":2620,"char_end":2768,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Device data , such as your computer or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Device%20data%20%2C,state%20or%20geographic%20area.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":3947,"char_end":4356,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Communication interaction data such as your interactions with our email, text or other communications (e.g., whether you open our emails) – we may do this through the use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Communication%20interaction%20data,invisibly%20in%20our%20emails.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":4718,"char_end":4988,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Cookies. Some of our automatic data collection is facilitated by cookies and similar technologies.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Cookies.%20Some%20of,cookies%20and%20similar%20technologies.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":4993,"char_end":5092,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Events. We may use your personal information to administer events that we organize or sponsor.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Events.%20We%20may,we%20organize%20or%20sponsor.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":7097,"char_end":7192,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Shared content: If you choose to share visuals or presentations using sharing links, the recipients of those links will be able to view the shared content.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Shared%20content%3A%20If,view%20the%20shared%20content.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":13316,"char_end":13472,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Your profile information may be visible to other users when you collaborate or share content. We do not make your personal information publicly available without your explicit choice to share it.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Your%20profile%20information,choice%20to%20share%20it.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":13608,"char_end":13804,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Opt-out of communications. You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us . Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Opt-out%20of%20communications.,and%20other%20non-marketing%20emails.","structural_citation":"Privacy Policy › “Your choices”","citation_basis":"heading_path","char_start":13973,"char_end":14294,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Declining%20to%20provide,to%20provide%20those%20services.","structural_citation":"Privacy Policy › “Your choices”","citation_basis":"heading_path","char_start":14570,"char_end":14795,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" For questions about this Privacy Policy or to exercise your privacy rights, please contact us using the information above.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20For%20questions%20about,using%20the%20information%20above.","structural_citation":"Privacy Policy › “Data Protection Officer: Erwan Martin — [email protected]”","citation_basis":"heading_path","char_start":19806,"char_end":19929,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Transactional data , such as information relating to or needed to complete your orders on or through the Service, including payment details, order numbers and transaction history.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Transactional%20data%20%2C,numbers%20and%20transaction%20history.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":2096,"char_end":2276,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Compliance and protection. We may use your personal information to:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Compliance%20and%20protection.,your%20personal%20information%20to%3A","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":7592,"char_end":7660,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Marketing data , such as your preferences for receiving our marketing communications and details about your engagement with them.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Marketing%20data%20%2C,your%20engagement%20with%20them.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":2278,"char_end":2408,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" We may use your personal information for the following purposes or as otherwise described at the time of collection:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20may%20use,the%20time%20of%20collection%3A","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":5143,"char_end":5260,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Public sources , such as government agencies, public records, social media platforms, and other publicly available sources.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Public%20sources%20%2C,other%20publicly%20available%20sources.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":2919,"char_end":3043,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" U.S. state privacy rights. Depending on your state of residency, applicable laws may provide for certain privacy rights. To exercise, or appeal our decision regarding such rights, please contact us at [email protected] .","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20U.S.%20state%20privacy,us%20at%20%5Bemail%26%23160%3Bprotected%5D%20.","structural_citation":"Privacy Policy › “Your choices”","citation_basis":"heading_path","char_start":15223,"char_end":15449,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Access control: Access to user data is limited strictly to authorized personnel who need it for operational or support purposes. Internal access is managed using role-based permissions.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Access%20control%3A%20Access,managed%20using%20role-based%20permissions.","structural_citation":"Privacy Policy › “Security”","citation_basis":"heading_path","char_start":17540,"char_end":17726,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Profile data , such as your password.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Profile%20data%20%2C%20such%20as%20your%20password.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":1922,"char_end":1960,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Access and control of your information. Various privacy laws provide you with certain rights regarding your personal information, those rights may include the right to:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Access%20and%20control,include%20the%20right%20to%3A","structural_citation":"Privacy Policy › “Your rights”","citation_basis":"heading_path","char_start":15475,"char_end":15644,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20employ%20a,of%20your%20personal%20information.","structural_citation":"Privacy Policy › “Security”","citation_basis":"heading_path","char_start":17094,"char_end":17370,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Third-party%20sources.%20We,other%20sources%2C%20such%20as%3A","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":2773,"char_end":2915,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Communications data based on our exchanges with you, including when you contact us through the Service, social media, or otherwise.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Communications%20data%20based,social%20media%2C%20or%20otherwise.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":1962,"char_end":2094,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Information%20you%20provide,Service%20or%20otherwise%20includes%3A","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":1603,"char_end":1720,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 7.1.2 Napkin AI provides Customers with a mechanism to opt out of all non-essential data use. Where the Customer exercises such opt-out (via Account Settings, Teamspace settings), Napkin AI shall process Customer Personal Data solely to deliver the Services and shall not use any Customer interaction data for any purpose beyond service delivery. Opt-out requests will be honoured within two (2) business days.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.2%20Napkin%20AI,two%20(2)%20business%20days.","structural_citation":"§ 7.1.2","citation_basis":"section_number","char_start":17389,"char_end":17800,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20communicate%20with%20you,support%20and%20administrative%20messages%3B","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":5580,"char_end":5739,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" provide support for the Service, and respond to your requests, questions and feedback.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20provide%20support%20for,requests%2C%20questions%20and%20feedback.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":5931,"char_end":6018,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for the following marketing purposes:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Marketing.%20We%2C%20our,the%20following%20marketing%20purposes%3A","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6712,"char_end":6874,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Service delivery and operations. We may use your personal information to:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Service%20delivery%20and,your%20personal%20information%20to%3A","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":5262,"char_end":5336,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Service improvement and analytics. We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Service%20improvement%20and,new%20products%20and%20services.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":7197,"char_end":7590,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Privacy-by-design principles applied; personal data collection limited to what is necessary; regular data mapping and inventory reviews. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Privacy-by-design%20principles%20applied%3B,and%20inventory%20reviews.%20","structural_citation":"Terms of Service › “Data Minimization”","citation_basis":"heading_path","char_start":34008,"char_end":34146,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" The Service is not intended for use by anyone under 13 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us using the details in the 'How to contact us' section. If we learn that we have collected personal information through the Service from a child without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20The%20Service%20is,to%20delete%20the%20information.","structural_citation":"Privacy Policy › “Children”","citation_basis":"heading_path","char_start":18444,"char_end":18960,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Encryption: All data is encrypted in transit using HTTPS/TLS protocols. Sensitive data stored on our servers is encrypted at rest.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Encryption%3A%20All%20data,is%20encrypted%20at%20rest.","structural_citation":"Privacy Policy › “Security”","citation_basis":"heading_path","char_start":17407,"char_end":17538,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Customer Personal Data” \n means any Personal Data that is submitted to, stored in, or processed through the Services by or on behalf of the Customer. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CCustomer%20Personal%20Data%E2%80%9D,of%20the%20Customer.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":2309,"char_end":2461,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Personal Data” \n has the meaning given in Article 4(1) of the GDPR. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CPersonal%20Data%E2%80%9D%20has,of%20the%20GDPR.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":3260,"char_end":3330,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Processing” \n has the meaning given in Article 4(2) of the GDPR, and “Process”, “Processes”, and “Processed” shall be construed accordingly. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CProcessing%E2%80%9D%20has%20the,be%20construed%20accordingly.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":3788,"char_end":3931,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Services” \n means the Napkin AI visual communication and diagramming platform and any related professional services provided to the Customer under the Agreement. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CServices%E2%80%9D%20means%20the,under%20the%20Agreement.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":4009,"char_end":4173,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “UK Personal Data” \n means Personal Data subject to the UK GDPR. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CUK%20Personal%20Data%E2%80%9D,the%20UK%20GDPR.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":4951,"char_end":5017,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 4.2 The Customer shall be solely responsible for the accuracy, quality, and lawfulness of Customer Personal Data provided to Napkin AI. The Customer shall not submit to the Services any special category personal data (as defined in Article 9 GDPR) or criminal conviction data without first notifying Napkin AI and agreeing in writing on the applicable legal basis and any additional safeguards required. Where the Customer submits personal data belonging to individuals under 18 years of age, the Customer represents and warrants that it has obtained all necessary consents, authorizations, and legal bases required under applicable law (including, where applicable, FERPA and COPPA) and shall be solely responsible for ensuring compliance with any additional safeguards required for the processing of minors’ data.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%204.2%20The%20Customer,processing%20of%20minors%E2%80%99%20data.","structural_citation":"§ 4.2","citation_basis":"section_number","char_start":11260,"char_end":12076,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 6.1 Napkin AI shall notify the Customer without undue delay, and in any event within forty-eight (48) hours of becoming aware of a confirmed Personal Data Breach affecting Customer Personal Data.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.1%20Napkin%20AI,affecting%20Customer%20Personal%20Data.","structural_citation":"§ 6.1","citation_basis":"section_number","char_start":15856,"char_end":16052,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 6.2 Such notification shall include, to the extent available at the time of notification: (a) a description of the nature of the Personal Data Breach, including the categories and approximate number of Data Subjects and records affected; (b) the name and contact details of Napkin AI’s Data Protection Officer ( [email protected] ); (c) the likely consequences of the breach; and (d) the measures taken or proposed to address the breach.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.2%20Such%20notification,to%20address%20the%20breach.","structural_citation":"§ 6.2","citation_basis":"section_number","char_start":16054,"char_end":16497,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 8.1 To the extent that Napkin AI Processes Customer Personal Data that is subject to U.S. Privacy Laws, the following provisions apply.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.1%20To%20the,the%20following%20provisions%20apply.","structural_citation":"§ 8.1","citation_basis":"section_number","char_start":19567,"char_end":19703,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Account data (name, email, job title, company); Content data (diagrams, visuals, documents created or uploaded by users); Usage data (feature interactions, session identifiers) – processed in identifiable form solely for service delivery; only de-identified and aggregated derivatives are used for product and model improvement in accordance with Section 7.1.3 of this DPA, and such de-identified data does not constitute Personal Data; Support data (correspondence, error reports). ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Account%20data%20(name%2C,(correspondence%2C%20error%20reports).%20","structural_citation":"Terms of Service › “Categories of Personal Data”","citation_basis":"heading_path","char_start":29879,"char_end":30363,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" https://openai.com/privacy ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fopenai.com%2Fprivacy%20","structural_citation":"Terms of Service › “AI language model inference (GPT series)”","citation_basis":"heading_path","char_start":31114,"char_end":31142,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" https://cloud.google.com/privacy ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fcloud.google.com%2Fprivacy%20","structural_citation":"Terms of Service › “Business intelligence and analytics”","citation_basis":"heading_path","char_start":31805,"char_end":31839,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" All data encrypted in transit using TLS 1.2 or higher; all data encrypted at rest using AES-256; encryption key management via Google Cloud KMS with automatic key rotation. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20All%20data%20encrypted,automatic%20key%20rotation.%20","structural_citation":"Terms of Service › “Encryption”","citation_basis":"heading_path","char_start":32848,"char_end":33022,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Documented incident response plan tested annually; escalation paths to CTO and DPO; post-incident reviews for all severity-1 events. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Documented%20incident%20response,all%20severity-1%20events.%20","structural_citation":"Terms of Service › “Incident Response”","citation_basis":"heading_path","char_start":33404,"char_end":33538,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Role-based access control (RBAC); principle of least privilege enforced; multi-factor authentication (MFA) required for all privileged access; quarterly access reviews; immediate revocation upon termination. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Role-based%20access%20control,revocation%20upon%20termination.%20","structural_citation":"Terms of Service › “Access Control”","citation_basis":"heading_path","char_start":32620,"char_end":32829,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Data Subject” \n means the identified or identifiable natural person to whom Personal Data relates. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CData%20Subject%E2%80%9D%20means,Personal%20Data%20relates.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":2467,"char_end":2568,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.2.1 Napkin AI shall implement and maintain appropriate technical and organizational measures to protect Customer Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of Processing, as further detailed in Annex 3.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.2.1%20Napkin%20AI,detailed%20in%20Annex%203.","structural_citation":"§ 3.2.1","citation_basis":"section_number","char_start":6786,"char_end":7176,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Third-party services , such as Google login services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Third-party%20services%20%2C,settings%20on%20that%20service.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":3344,"char_end":3677,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Collection, storage, retrieval, display, transmission, and deletion of Customer Personal Data as necessary to provide the Services. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Collection%2C%20storage%2C%20retrieval%2C,provide%20the%20Services.%20","structural_citation":"Terms of Service › “Nature of Processing”","citation_basis":"heading_path","char_start":29540,"char_end":29673,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Automated dependency scanning via Dependabot; vulnerability report program ( https://vdp.napkin.ai/ ); penetration testing at minimum annually; critical vulnerabilities remediated within 72 hours. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Automated%20dependency%20scanning,within%2072%20hours.%20","structural_citation":"Terms of Service › “Vulnerability Management”","citation_basis":"heading_path","char_start":33180,"char_end":33378,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Processing of Customer Personal Data in connection with the provision of the Napkin AI visual communication and diagramming services. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Processing%20of%20Customer,and%20diagramming%20services.%20","structural_citation":"Terms of Service › “Subject Matter”","citation_basis":"heading_path","char_start":29219,"char_end":29354,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" To provide, maintain, secure, and support the Services; to fulfill Customer instructions; and to comply with applicable legal obligations. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20To%20provide%2C%20maintain%2C,applicable%20legal%20obligations.%20","structural_citation":"Terms of Service › “Purpose of Processing”","citation_basis":"heading_path","char_start":29703,"char_end":29843,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" understand your needs and interests, and personalize your experience with the Service and our communications; and","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20understand%20your%20needs,and%20our%20communications%3B%20and","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":5815,"char_end":5929,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Access your personal information and request a copy of the data we hold about you","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Access%20your%20personal,we%20hold%20about%20you","structural_citation":"Privacy Policy › “Your rights”","citation_basis":"heading_path","char_start":15648,"char_end":15730,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Automatic%20data%20collection.,online%20services%2C%20such%20as%3A","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":3682,"char_end":3943,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Direct marketing. We may send you direct marketing communications, including our newsletter and product updates. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Direct%20marketing.%20We,of%20marketing%20section%20below.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6878,"char_end":7095,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Do Not Track. Some Internet browsers may be configured to send \"Do Not Track\" signals to the online services that you visit. We currently do not respond to \"Do Not Track\" or similar signals. To find out more about \"Do Not Track,\" please visit http://www.allaboutdnt.com .","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Do%20Not%20Track.,please%20visit%20http%3A%2F%2Fwww.allaboutdnt.com%20.","structural_citation":"Privacy Policy › “Your choices”","citation_basis":"heading_path","char_start":14296,"char_end":14568,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" https://www.intercom.com/legal/privacy ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fwww.intercom.com%2Flegal%2Fprivacy%20","structural_citation":"Terms of Service › “Customer support and communication”","citation_basis":"heading_path","char_start":31358,"char_end":31398,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Research%20and%20development.,and%20promote%20our%20business.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6023,"char_end":6710,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 6.3 Where all required information is not available at the time of initial notification, Napkin AI shall provide such information in phases as it becomes available, without undue further delay.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.3%20Where%20all,without%20undue%20further%20delay.","structural_citation":"§ 6.3","citation_basis":"section_number","char_start":16499,"char_end":16693,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Demographic data , such as your city, state, country of residence, postal code.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Demographic%20data%20%2C,of%20residence%2C%20postal%20code.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":1840,"char_end":1920,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" personalize the service, including remembering the devices from which you have previously logged in and remembering your selections and preferences as you navigate the Service;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20personalize%20the%20service%2C,you%20navigate%20the%20Service%3B","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":5401,"char_end":5578,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Other users and the public. Depending on your account settings and the functionality you choose to use:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Other%20users%20and,you%20choose%20to%20use%3A","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":13043,"char_end":13147,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Access restrictions: Administrative access is protected by strong authentication, and access logs are regularly reviewed. Systems are monitored for suspicious activity and protected against known threats.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Access%20restrictions%3A%20Administrative,protected%20against%20known%20threats.","structural_citation":"Privacy Policy › “Security”","citation_basis":"heading_path","char_start":17728,"char_end":17933,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":"We currently do not respond to \"Do Not Track\" or similar signals. To find out more about \"Do Not Track,\" please visit http://www.allaboutdnt.com .","caution":"The platform explicitly ignores Do Not Track browser signals, meaning users relying on browser-level tracking opt-outs will not be protected.","provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=We%20currently%20do%20not,please%20visit%20http%3A%2F%2Fwww.allaboutdnt.com%20.","structural_citation":"Privacy Policy › “Your choices”","citation_basis":"heading_path","char_start":14422,"char_end":14568,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Contact data , such as your first and last name, salutation, email address, professional title, and company name.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Contact%20data%20%2C,title%2C%20and%20company%20name.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":1724,"char_end":1838,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" communicate with you about events or contests in which you participate;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20communicate%20with%20you,in%20which%20you%20participate%3B","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":5741,"char_end":5813,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" provide, operate and improve the Service and our business;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20provide%2C%20operate%20and,Service%20and%20our%20business%3B","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":5340,"char_end":5399,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Personal Data Breach” \n means a confirmed breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Customer Personal Data transmitted, stored, or otherwise processed by Napkin AI. For the avoidance of doubt, unsuccessful access attempts, port scans, pings, and denial-of-service attacks that do not result in unauthorized access do not constitute a Personal Data Breach. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CPersonal%20Data%20Breach%E2%80%9D,Personal%20Data%20Breach.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":3336,"char_end":3782,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Online activity data , such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Online%20activity%20data,clicked%20links%20within%20them.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":4358,"char_end":4716,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"moderation_enforcement","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 4.3 The Customer shall implement appropriate technical and organizational measures to secure Customer’s own systems, credentials, and any software integrations used to access the Services.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%204.3%20The%20Customer,to%20access%20the%20Services.","structural_citation":"§ 4.3","citation_basis":"section_number","char_start":12078,"char_end":12267,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"moderation_enforcement","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" enforce the terms and conditions that govern the Service, including our Acceptable Use Policy ;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20enforce%20the%20terms,Acceptable%20Use%20Policy%20%3B","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":8049,"char_end":8145,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"moderation_enforcement","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Mailmodo Technologies, Inc. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Mailmodo%20Technologies%2C%20Inc.%20","structural_citation":"Terms of Service › “Transactional email delivery”","citation_basis":"heading_path","char_start":31617,"char_end":31646,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"moderation_enforcement","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20reserve%20the,Service%20and%20our%20business.","structural_citation":"Privacy Policy › “Changes to this Privacy Policy”","citation_basis":"heading_path","char_start":19005,"char_end":19611,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"moderation_enforcement","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" More specifically:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20More%20specifically%3A","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":9340,"char_end":9359,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"moderation_enforcement","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" The Customer, being the entity that has accepted the Napkin AI Terms of Service or executed an enterprise agreement. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20Customer%2C%20being,an%20enterprise%20agreement.%20","structural_citation":"Terms of Service › “Data Exporter (Controller)”","citation_basis":"heading_path","char_start":28912,"char_end":29030,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"moderation_enforcement","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Customer employees, contractors, agents, and end-users who access the Services under Customer’s account. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Customer%20employees%2C%20contractors%2C,under%20Customer%E2%80%99s%20account.%20","structural_citation":"Terms of Service › “Categories of Data Subjects”","citation_basis":"heading_path","char_start":30399,"char_end":30505,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" When we no longer require the personal information we have collected about you, we may either delete it, anonymize it, or isolate it from further processing.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20When%20we%20no,it%20from%20further%20processing.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":9180,"char_end":9338,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"data_retention","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 11.2 Return and Deletion. Upon expiry or termination of the Agreement, Napkin AI shall, at the Customer’s election: (a) return all Customer Personal Data in a structured, commonly used, machine-readable format; or (b) securely delete or destroy all Customer Personal Data. Such return or deletion shall be completed within seven (7) calendar days for data held in active production systems and within thirty (30) calendar days for data held in backup systems and operational logs, unless applicable law requires Napkin AI to retain such data for a longer period.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.2%20Return%20and,for%20a%20longer%20period.","structural_citation":"§ 11.2","citation_basis":"section_number","char_start":24467,"char_end":25030,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"data_retention","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 11.3 Napkin AI shall, upon the Customer’s written request, provide written certification that all Customer Personal Data has been deleted or returned in accordance with this Section 11.2.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.3%20Napkin%20AI,with%20this%20Section%2011.2.","structural_citation":"§ 11.3","citation_basis":"section_number","char_start":25032,"char_end":25220,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"data_retention","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 11.5 The following provisions shall survive termination of this DPA: Section 1 (Definitions), Section 9 (Customer Indemnity), Section 10 (Liability), Section 11.2 to 11.4 (Return and Deletion), and Section 12 (General Provisions).","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.5%20The%20following,Section%2012%20(General%20Provisions).","structural_citation":"§ 11.5","citation_basis":"section_number","char_start":25544,"char_end":25775,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"data_retention","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" For the term of the Agreement and until all Customer Personal Data has been deleted or returned in accordance with Section 11 of this DPA. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20For%20the%20term,of%20this%20DPA.%20","structural_citation":"Terms of Service › “Duration”","citation_basis":"heading_path","char_start":29371,"char_end":29511,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"data_retention","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Business Continuity Plan (BCP) reviewed annually; daily automated backups with 30-day retention; RTO: 24 hours; RPO: 24 hours. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Business%20Continuity%20Plan,RPO%3A%2024%20hours.%20","structural_citation":"Terms of Service › “Business Continuity”","citation_basis":"heading_path","char_start":33566,"char_end":33694,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Account-related data (such as email, preferences, visuals, input text) is kept as long as your account is active.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Account-related%20data%20(such,your%20account%20is%20active.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":9363,"char_end":9477,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" 11.4 Where fulfilment of a data return or deletion request under Section 11.2 requires manual work exceeding two (2) person-hours, Napkin AI may charge the Customer its reasonable, documented costs at then-current professional services rates, except where such charges are prohibited by Applicable Data Protection Laws.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.4%20Where%20fulfilment,Applicable%20Data%20Protection%20Laws.","structural_citation":"§ 11.4","citation_basis":"section_number","char_start":25222,"char_end":25542,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Usage data and analytics may be retained in aggregate or anonymized form for product improvement and reporting.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Usage%20data%20and,product%20improvement%20and%20reporting.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":9581,"char_end":9693,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Support and communication records are stored to maintain service continuity and historical context.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Support%20and%20communication,continuity%20and%20historical%20context.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":9479,"char_end":9579,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We generally retain information for as long as necessary to provide the service, to fulfill the purposes outlined in this Privacy Policy, to comply with legal, accounting, contractual, or operational obligations, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20generally%20retain,the%20applicable%20legal%20requirements.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":8483,"char_end":9178,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"data_retention","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" When you ask us to delete your account , most personal data is scheduled for deletion immediately from active systems and you will no longer appear in any user-facing parts of the Service. However, some data may be temporarily retained in secure backups for a limited period for operational, legal, or security reasons such as fraud prevention or dispute handling. These backups are automatically purged after our standard retention window, and the data is not actively used during that time. No personal data is kept longer than necessary, and we will not retain data beyond what is required by law or for legitimate business purposes.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20When%20you%20ask,for%20legitimate%20business%20purposes.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":9697,"char_end":10334,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"indemnity_liability","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be used, linked or integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20The%20Service%20may,online%20services%20you%20use.","structural_citation":"Privacy Policy › “Other sites and services”","citation_basis":"heading_path","char_start":16444,"char_end":17071,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"indemnity_liability","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" (c) any breach by the Customer of its representations, warranties, or obligations under this DPA or Applicable Data Protection Laws; or","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(c)%20any%20breach,Data%20Protection%20Laws%3B%20or","structural_citation":"§ 9.1","citation_basis":"section_number","char_start":21882,"char_end":22018,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" 10.2 Neither party shall be liable to the other for any indirect, incidental, special, exemplary, consequential, or punitive damages, including loss of profits, revenue, goodwill, or data, arising out of or in connection with this DPA, even if the party has been advised of the possibility of such damages, regardless of the theory of liability.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2010.2%20Neither%20party,the%20theory%20of%20liability.","structural_citation":"§ 10.2","citation_basis":"section_number","char_start":23367,"char_end":23713,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" 9.1 The Customer shall defend, indemnify, and hold harmless Napkin AI and its parent company, affiliates, officers, directors, employees, agents, and successors (“Napkin AI Indemnified Parties”) from and against any third-party claims, investigations, regulatory proceedings, fines, losses, damages, liabilities, costs, and reasonable legal fees (“Losses”) arising out of or related to:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%209.1%20The%20Customer,of%20or%20related%20to%3A","structural_citation":"§ 9.1","citation_basis":"section_number","char_start":21204,"char_end":21591,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" 6.4 Napkin AI’s notification of, or response to, a Personal Data Breach shall not constitute an acknowledgement of fault or liability by Napkin AI with respect to the incident.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.4%20Napkin%20AI%E2%80%99s,respect%20to%20the%20incident.","structural_citation":"§ 6.4","citation_basis":"section_number","char_start":16695,"char_end":16872,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 9.2 Napkin AI shall: (a) promptly notify the Customer in writing upon becoming aware of any claim for which indemnification may be sought; (b) grant the Customer sole control of the defense and settlement of such claim (provided that the Customer may not settle any claim that imposes non-monetary obligations on, or admits fault on behalf of, any Napkin AI Indemnified Party without Napkin AI’s prior written consent); and (c) provide reasonable cooperation and assistance to the Customer in the defense of such claim, at the Customer’s expense.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%209.2%20Napkin%20AI,at%20the%20Customer%E2%80%99s%20expense.","structural_citation":"§ 9.2","citation_basis":"section_number","char_start":22252,"char_end":22799,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 9.3 The indemnification obligations in this Section 9 are subject to the liability limitations set out in Section 10 and do not apply to the extent that any Losses arise from Napkin AI’s own negligence, willful misconduct, or breach of this DPA.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%209.3%20The%20indemnification,breach%20of%20this%20DPA.","structural_citation":"§ 9.3","citation_basis":"section_number","char_start":22801,"char_end":23047,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 10.3 Nothing in this Section 10 shall limit either party’s liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be limited or excluded by applicable law.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2010.3%20Nothing%20in,excluded%20by%20applicable%20law.","structural_citation":"§ 10.3","citation_basis":"section_number","char_start":23715,"char_end":23951,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" (a) the Customer’s failure to establish, maintain, or document a lawful basis for Processing Customer Personal Data under Applicable Data Protection Laws;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(a)%20the%20Customer%E2%80%99s,Applicable%20Data%20Protection%20Laws%3B","structural_citation":"§ 9.1","citation_basis":"section_number","char_start":21593,"char_end":21748,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 10.4 The parties acknowledge that neither party shall be obligated to indemnify the other for any administrative fines, penalties, or sanctions imposed directly by a Supervisory Authority on either party in respect of that party’s own compliance failures.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2010.4%20The%20parties,party%E2%80%99s%20own%20compliance%20failures.","structural_citation":"§ 10.4","citation_basis":"section_number","char_start":23953,"char_end":24209,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" (d) any claim by a Data Subject arising from the Customer’s acts or omissions in respect of that Data Subject’s Personal Data, where such claim is not attributable to Napkin AI’s failure to perform its obligations under this DPA.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(d)%20any%20claim,obligations%20under%20this%20DPA.","structural_citation":"§ 9.1","citation_basis":"section_number","char_start":22020,"char_end":22250,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" 10.1 Each party’s total aggregate liability to the other party under or in connection with this DPA shall be subject to the liability limitations and caps set out in the Agreement. For the avoidance of doubt, the DPA is part of the Agreement for the purposes of any liability cap.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2010.1%20Each%20party%E2%80%99s,of%20any%20liability%20cap.","structural_citation":"§ 10.1","citation_basis":"section_number","char_start":23084,"char_end":23365,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"indemnity_liability","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" (b) the Customer’s instructions to Napkin AI that, if followed, would cause Napkin AI to violate Applicable Data Protection Laws;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(b)%20the%20Customer%E2%80%99s,Applicable%20Data%20Protection%20Laws%3B","structural_citation":"§ 9.1","citation_basis":"section_number","char_start":21750,"char_end":21880,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"confidentiality","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Confidentiality obligations in employment contracts; annual security awareness training. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Confidentiality%20obligations%20in,security%20awareness%20training.%20","structural_citation":"Terms of Service › “Personnel Security”","citation_basis":"heading_path","char_start":33721,"char_end":33811,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"confidentiality","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.1.1 Napkin AI shall ensure that all personnel authorized to Process Customer Personal Data are subject to appropriate confidentiality obligations, whether by contract or statutory duty, and that access is limited to those personnel who require it to perform the Services.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.1.1%20Napkin%20AI,to%20perform%20the%20Services.","structural_citation":"§ 3.1.1","citation_basis":"section_number","char_start":6456,"char_end":6730,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" https://sentry.io/privacy ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fsentry.io%2Fprivacy%20","structural_citation":"Terms of Service › “Error monitoring and crash reporting”","citation_basis":"heading_path","char_start":31937,"char_end":31964,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Our affiliate partners , such as our affiliate network provider and publishers, influencers, and promoters who participate in our paid affiliate programs.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Our%20affiliate%20partners,our%20paid%20affiliate%20programs.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":3187,"char_end":3342,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":"Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, such as:\n\n \n Google Cloud Platform (hosting and infrastructure)\n\n Intercom (customer support and communication)\n\n Sendgrid and Mailmodo (email delivery)\n\n Sentry (error and performance monitoring)\n\n Google Analytics (product analytics)\n\n OpenAI and Gemini (AI-powered generation and processing services)\n\n \n These service providers process personal data only on our instructions and under strict confidentiality agreements.","caution":"User content is shared with OpenAI and Gemini for AI generation/processing. These third-party AI providers have their own data use and training policies that may independently apply to submitted content.","provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=Service%20providers.%20Third%20parties,under%20strict%20confidentiality%20agreements.","structural_citation":"Privacy Policy › “How we share your personal information”","citation_basis":"heading_path","char_start":10632,"char_end":11172,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 8.2 Service Provider Designation. For purposes of the CCPA/CPRA, Napkin AI is a “service provider” and “contractor” with respect to Customer Personal Data. Napkin AI shall not: (a) sell or share Customer Personal Data (as those terms are defined under CCPA/CPRA); (b) retain, use, or disclose Customer Personal Data for any purpose other than the business purposes specified in this DPA and the Agreement; or (c) combine Customer Personal Data received from the Customer with personal information received from other sources except as permitted by U.S. Privacy Laws.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.2%20Service%20Provider,by%20U.S.%20Privacy%20Laws.","structural_citation":"§ 8.2","citation_basis":"section_number","char_start":19705,"char_end":20272,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Private sources , such as data providers and data licensors.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Private%20sources%20%2C,providers%20and%20data%20licensors.","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":3045,"char_end":3106,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20comply%20with%20applicable,requests%20from%20government%20authorities%3B","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":7664,"char_end":7818,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Affiliates. Our corporate parent, subsidiaries, and affiliates.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Affiliates.%20Our%20corporate%20parent%2C%20subsidiaries%2C%20and%20affiliates.","structural_citation":"Privacy Policy › “How we share your personal information”","citation_basis":"heading_path","char_start":10565,"char_end":10629,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20protect%20our%2C%20your,and%20defending%20legal%20claims)%3B","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":7820,"char_end":7935,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, such as:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Service%20providers.%20Third,our%20business%2C%20such%20as%3A","structural_citation":"Privacy Policy › “How we share your personal information”","citation_basis":"heading_path","char_start":10631,"char_end":10757,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" We may share your personal information with the following parties and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20may%20share,the%20time%20of%20collection.","structural_citation":"Privacy Policy › “How we share your personal information”","citation_basis":"heading_path","char_start":10387,"char_end":10563,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so, such as when you share content with collaborators, or connect third-party services. We only share information that is needed for these other companies to provide the services that you have requested.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Third%20parties%20designated,that%20you%20have%20requested.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11447,"char_end":11802,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Professional%20advisors.%20Professional,they%20render%20to%20us.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11917,"char_end":12095,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.3.3 Napkin AI shall impose on all Sub-Processors data protection obligations that are no less protective than those set out in this DPA by way of written contract. Napkin AI remains liable to the Customer for the performance of each Sub-Processor’s obligations to the extent Napkin AI performs such obligations itself.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.3.3%20Napkin%20AI,performs%20such%20obligations%20itself.","structural_citation":"§ 3.3.3","citation_basis":"section_number","char_start":8389,"char_end":8710,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Twilio SendGrid, Inc. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Twilio%20SendGrid%2C%20Inc.%20","structural_citation":"Terms of Service › “Payment processing and billing”","citation_basis":"heading_path","char_start":31502,"char_end":31525,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 7.1.4 Content submitted by users may be processed through third-party AI inference APIs as necessary to provide the Services, subject to the sub-processor agreements in Annex 2 and the zero-data-retention commitments in Section 7.2.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.4%20Content%20submitted,commitments%20in%20Section%207.2.","structural_citation":"§ 7.1.4","citation_basis":"section_number","char_start":18271,"char_end":18504,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.3.2 The Customer may object to a new or replacement Sub-Processor on reasonable data protection grounds within the ten (10) day notice period by providing written notice to Napkin AI at [email protected] . The parties shall cooperate in good faith to resolve the objection. If the parties cannot resolve the objection within a reasonable timeframe, either party may terminate the affected Services upon written notice.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.3.2%20The%20Customer,Services%20upon%20written%20notice.","structural_citation":"§ 3.3.2","citation_basis":"section_number","char_start":7961,"char_end":8387,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Sub-Processor” \n means any Processor engaged by Napkin AI to process Customer Personal Data on behalf of the Customer. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CSub-Processor%E2%80%9D%20means%20any,of%20the%20Customer.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":4179,"char_end":4300,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" https://www.twilio.com/legal/privacy ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fwww.twilio.com%2Flegal%2Fprivacy%20","structural_citation":"Terms of Service › “Transactional email delivery”","citation_basis":"heading_path","char_start":31573,"char_end":31611,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 5.5 Government Agency Requests. As of the Effective Date of this DPA, Napkin AI (and Second Layer, Inc.) has not received any formal legal requests from any government intelligence or security agency for access to Customer Personal Data. If Napkin AI receives any such request after the Effective Date, Napkin AI shall: (a) to the extent permitted by applicable law, promptly notify the Customer; (b) use commercially reasonable efforts to redirect the relevant law enforcement or government agency to request that data directly from the Customer; and (c) provide the Customer with reasonable notice of any such demand unless legally prohibited from doing so by a court of competent jurisdiction or applicable law.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.5%20Government%20Agency,jurisdiction%20or%20applicable%20law.","structural_citation":"§ 5.5","citation_basis":"section_number","char_start":15081,"char_end":15796,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" 7.2.1 Napkin AI currently uses Google Cloud AI (Vertex AI) and OpenAI, L.L.C., as AI inference sub-processors. These providers process Customer prompts and content in the ordinary course of delivering AI-powered features.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.2.1%20Napkin%20AI,of%20delivering%20AI-powered%20features.","structural_citation":"§ 7.2.1","citation_basis":"section_number","char_start":18540,"char_end":18762,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Stripe, Inc. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Stripe%2C%20Inc.%20","structural_citation":"Terms of Service › “Customer support and communication”","citation_basis":"heading_path","char_start":31404,"char_end":31418,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Collaborative content: When you collaborate with other users, they will have access to the content you choose to share with them.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Collaborative%20content%3A%20When,to%20share%20with%20them.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":13474,"char_end":13604,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Note: Organizations with separate data processing agreements may have different data sharing arrangements as specified in their agreements.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Note%3A%20Organizations%20with,specified%20in%20their%20agreements.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":13806,"char_end":13946,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.3.1 The Customer grants Napkin AI general written authorization to engage the Sub-Processors listed in Annex 2 and at https://www.napkin.ai/sub-processors . Napkin AI shall provide at least ten (10) calendar days' prior notice of any intended addition or replacement of a Sub-Processor by updating the Sub-Processor page at https://www.napkin.ai/sub-processors and, where the Customer has subscribed to notifications, by email to the Customer's registered account address. The Customer may subscribe to Sub-Processor change notifications at https://www.napkin.ai/sub-processors .","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.3.1%20The%20Customer,notifications%20at%20https%3A%2F%2Fwww.napkin.ai%2Fsub-processors%20.","structural_citation":"§ 3.3.1","citation_basis":"section_number","char_start":7377,"char_end":7959,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" The following Sub-Processors are authorized by the Customer pursuant to Section 3.3.1 of this DPA. This list reflects the Sub-Processors engaged as of the Effective Date. The most current list is also referenced in the Napkin AI Privacy Policy at https://www.napkin.ai/privacy-policy/ .","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20following%20Sub-Processors,Policy%20at%20https%3A%2F%2Fwww.napkin.ai%2Fprivacy-policy%2F%20.","structural_citation":"ANNEX 2 (– AUTHORIZED SUB-PROCESSORS)","citation_basis":"section_number","char_start":30666,"char_end":30953,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Linked third-party platforms. If you choose to connect to the Service through your social media account or other third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Linked%20third-party%20platforms.,from%20that%20third%20party.","structural_citation":"Privacy Policy › “Your choices”","citation_basis":"heading_path","char_start":14797,"char_end":15221,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" These service providers process personal data only on our instructions and under strict confidentiality agreements.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20These%20service%20providers,under%20strict%20confidentiality%20agreements.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11056,"char_end":11172,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Authorities%20and%20others.,protection%20purposes%20described%20above.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":12097,"char_end":12302,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in Napkin, financing of Napkin, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares), for example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Napkin as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Business%20transferees.%20We,of%20our%20business%20assets.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":12304,"char_end":13041,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" NOTE RE: AI SUB-PROCESSORS – ZERO DATA RETENTION: Napkin AI maintains zero-data-retention (ZDR) agreements with all AI inference sub-processors (currently Google Cloud AI and OpenAI). Customer Personal Data submitted to these providers is not retained beyond the immediate processing request and is not used for model training by those providers.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20NOTE%20RE%3A%20AI,training%20by%20those%20providers.","structural_citation":"Terms of Service › “Error monitoring and crash reporting”","citation_basis":"heading_path","char_start":31975,"char_end":32322,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Payment processors. Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy, https://stripe.com/privacy .","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Payment%20processors.%20Any,privacy%20policy%2C%20https%3A%2F%2Fstripe.com%2Fprivacy%20.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11174,"char_end":11445,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"subprocessors_data_sharing","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" https://stripe.com/privacy ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fstripe.com%2Fprivacy%20","structural_citation":"Terms of Service › “Payment processing and billing”","citation_basis":"heading_path","char_start":31468,"char_end":31496,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" (c) Clause 17 (governing law) – the laws of France shall govern the EU SCCs; and","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(c)%20Clause%2017,the%20EU%20SCCs%3B%20and","structural_citation":"§ 5.1","citation_basis":"section_number","char_start":13223,"char_end":13304,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.6.1 Napkin AI shall make available to the Customer all information reasonably necessary to demonstrate compliance with this DPA and shall allow for and contribute to audits and inspections conducted by the Customer or a qualified third-party auditor appointed by the Customer. The Customer shall provide at least thirty (30) days’ prior written notice of any audit request; audits shall be conducted during normal business hours, no more than once per calendar year, absent a confirmed Personal Data Breach, and the Customer shall bear all costs of such audit.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.6.1%20Napkin%20AI,costs%20of%20such%20audit.","structural_citation":"§ 3.6.1","citation_basis":"section_number","char_start":10002,"char_end":10565,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" DATA CONTROLLER: The entity or individual (“Customer”) that accepts the Napkin AI Terms of Service or executes an enterprise agreement with Napkin AI.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20DATA%20CONTROLLER%3A%20The,agreement%20with%20Napkin%20AI.","structural_citation":"Terms of Service › “Data Processing Agreement - Napkin AI”","citation_basis":"heading_path","char_start":293,"char_end":444,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" audit our internal processes for compliance with legal and contractual requirements or our internal policies;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20audit%20our%20internal,or%20our%20internal%20policies%3B","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":7937,"char_end":8047,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Note: If you are part of an organization that has a separate data processing agreement with us, please also refer to that agreement for any additional rights or procedures that may apply","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Note%3A%20If%20you,procedures%20that%20may%20apply","structural_citation":"Privacy Policy › “Withdraw consent where it was previously given”","citation_basis":"heading_path","char_start":16218,"char_end":16405,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" All sub-processors subject to data processing agreements with equivalent obligations; sub-processor list maintained per Annex 2; annual security reviews of critical sub-processors. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20All%20sub-processors%20subject,of%20critical%20sub-processors.%20","structural_citation":"Terms of Service › “Sub-Processor Management”","citation_basis":"heading_path","char_start":34179,"char_end":34361,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Controller” \n has the meaning given in Article 4(7) of the GDPR. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CController%E2%80%9D%20has%20the,of%20the%20GDPR.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":2236,"char_end":2303,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" (b) Option 2 of Clause 9 (general written authorization) is selected, with a ten (10) calendar day notice period;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(b)%20Option%202,calendar%20day%20notice%20period%3B","structural_citation":"§ 5.1","citation_basis":"section_number","char_start":13107,"char_end":13221,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 5.4 Mechanism Invalidity. If any transfer mechanism relied upon under this Section 5 becomes invalid, suspended, or otherwise unavailable, the parties shall cooperate in good faith to implement a lawful alternative transfer mechanism without undue delay. Napkin AI may suspend the relevant transfers until such mechanism is in place, without such suspension constituting a breach of this DPA or the Agreement.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.4%20Mechanism%20Invalidity.,DPA%20or%20the%20Agreement.","structural_citation":"§ 5.4","citation_basis":"section_number","char_start":14669,"char_end":15079,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" This Data Processing Agreement (“DPA”) forms part of the Napkin AI Terms of Service available at https://www.napkin.ai/terms-conditions/ (the “Agreement”) and sets out the terms on which Napkin AI processes Customer Personal Data on behalf of the Customer. This DPA is effective as of the date Customer creates an account, accepts the Terms of Service, or first accesses the Services, whichever occurs first.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20This%20Data%20Processing,Services%2C%20whichever%20occurs%20first.","structural_citation":"Terms of Service › “PREAMBLE”","citation_basis":"heading_path","char_start":467,"char_end":876,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Applicable Data Protection Laws” \n means, collectively, all laws and regulations applicable to the processing of personal data under this DPA, including, without limitation, the GDPR, the UK GDPR, the CCPA/CPRA, and all other applicable national, federal, or state privacy and data protection statutes in force during the term. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CApplicable%20Data%20Protection,during%20the%20term.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":1727,"char_end":2057,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “DPA” \n means this Data Processing Agreement, including all Annexes. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CDPA%E2%80%9D%20means%20this,including%20all%20Annexes.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":2574,"char_end":2644,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Processor” \n has the meaning given in Article 4(8) of the GDPR. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CProcessor%E2%80%9D%20has%20the,of%20the%20GDPR.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":3937,"char_end":4003,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “UK GDPR” \n means the GDPR as retained in UK law by the European Union (Withdrawal) Act 2018 and as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CUK%20GDPR%E2%80%9D%20means,Exit)%20Regulations%202019.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":4480,"char_end":4697,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 2.1 Napkin AI shall Process Customer Personal Data only on the Customer’s documented instructions as set out in this DPA, in Annex 1, and as further specified in the Agreement, except where required to do so by applicable law, in which case Napkin AI shall, to the extent permitted by law, inform the Customer of that legal requirement before Processing.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%202.1%20Napkin%20AI,legal%20requirement%20before%20Processing.","structural_citation":"§ 2.1","citation_basis":"section_number","char_start":5361,"char_end":5716,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “U.S. Privacy Laws” \n means the collective privacy, data protection, and data security laws and regulations issued by governmental authorities of any US state jurisdiction applicable to the Processing of Customer Personal Data under this DPA, including the CCPA/CPRA. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CU.S.%20Privacy%20Laws%E2%80%9D,including%20the%20CCPA%2FCPRA.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":5023,"char_end":5292,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 2.4 This DPA shall remain in effect for the duration of the Agreement and shall terminate automatically upon expiry or termination of the Agreement, subject to the survival provisions set out in Section 11.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%202.4%20This%20DPA,out%20in%20Section%2011.","structural_citation":"§ 2.4","citation_basis":"section_number","char_start":6169,"char_end":6376,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.4.1 Napkin AI shall, taking into account the nature of the Processing, promptly assist the Customer by appropriate technical and organizational measures to fulfil the Customer’s obligations to respond to Data Subject requests under Applicable Data Protection Laws, including requests for access, rectification, erasure, restriction, portability, and objection.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.4.1%20Napkin%20AI,restriction%2C%20portability%2C%20and%20objection.","structural_citation":"§ 3.4.1","citation_basis":"section_number","char_start":8748,"char_end":9111,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 5.1 EU Standard Contractual Clauses. To the extent that Napkin AI Processes Customer Personal Data originating from the European Economic Area (“EEA”) and transfers such data to the United States or any other country that has not been the subject of an adequacy decision by the European Commission, the parties agree that such transfers are made pursuant to the EU SCCs, which are incorporated into this DPA by reference, and completed as follows:","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.1%20EU%20Standard,and%20completed%20as%20follows%3A","structural_citation":"§ 5.1","citation_basis":"section_number","char_start":12526,"char_end":12974,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" The information required by Annex I, II, and III of the EU SCCs is set out in Annexes 1, 2, and 3 of this DPA, respectively.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20information%20required,of%20this%20DPA%2C%20respectively.","structural_citation":"§ 5.1","citation_basis":"section_number","char_start":13388,"char_end":13513,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 12.7 Acceptance. By creating a Napkin AI account, accepting the Terms of Service, or using the Services, the Customer acknowledges that it has read, understood, and agrees to be bound by this DPA. For enterprise customers with separately executed agreements, this DPA may also be executed in counterparts, including by electronic signature via DocuSign or equivalent platform.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.7%20Acceptance.%20By,DocuSign%20or%20equivalent%20platform.","structural_citation":"§ 12.7","citation_basis":"section_number","char_start":28306,"char_end":28683,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 7.3.1 Napkin AI’s Services do not, as of the Effective Date, deploy AI systems classified as high-risk under Regulation (EU) 2024/1689 (the “EU AI Act”). Napkin AI shall notify the Customer if this position changes and shall work with the Customer to address any resulting compliance obligations.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.3.1%20Napkin%20AI%E2%80%99s,any%20resulting%20compliance%20obligations.","structural_citation":"§ 7.3.1","citation_basis":"section_number","char_start":19214,"char_end":19511,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 8.5 Certification. Napkin AI certifies that it understands and will comply with its obligations as a service provider and contractor under the CCPA/CPRA, including the restrictions on use and disclosure of Customer Personal Data set forth in this Section 8.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.5%20Certification.%20Napkin,in%20this%20Section%208.","structural_citation":"§ 8.5","citation_basis":"section_number","char_start":20901,"char_end":21159,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 11.1 This DPA shall come into effect on the Effective Date and shall remain in force for the duration of the Agreement. This DPA shall terminate automatically upon the expiry or termination of the Agreement.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.1%20This%20DPA,termination%20of%20the%20Agreement.","structural_citation":"§ 11.1","citation_basis":"section_number","char_start":24257,"char_end":24465,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 12.6 Notices. All notices under this DPA shall be in writing. Notices to Napkin AI shall be sent to: Data Protection Officer, Napkin AI (Second Layer, Inc.), 626 Jay Street, Los Altos, CA 94022, [email protected] . Notices to Customer shall be sent to the email address associated with the Customer’s account.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.6%20Notices.%20All,with%20the%20Customer%E2%80%99s%20account.","structural_citation":"§ 12.6","citation_basis":"section_number","char_start":27989,"char_end":28304,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 12.3 Amendments. Napkin AI may update this DPA from time to time. For changes required by applicable law or that expand privacy protections for Customers, updates take effect immediately upon publication at https://www.napkin.ai/data-processing-agreement/ . For material changes; defined as changes that (a) add new categories of personal data processed, (b) add new purposes of processing, or (c) materially reduce Customer rights under this DPA, Napkin AI will provide at least thirty (30) days' notice by updating the DPA page at https://www.napkin.ai/data-processing-agreement/ with a summary of the changes and the date they take effect. Enterprise customers with separately executed DPAs will receive direct email notice of material changes. Continued use of the Services after the effective date of any update constitutes acceptance. Sub-processor changes are governed exclusively by Section 3.3.1 and are not subject to this Section 12.3.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.3%20Amendments.%20Napkin,to%20this%20Section%2012.3.","structural_citation":"§ 12.3","citation_basis":"section_number","char_start":26404,"char_end":27351,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" United States (primary). Sub-processor locations are listed in Annex 2. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20United%20States%20(primary).,in%20Annex%202.%20","structural_citation":"Terms of Service › “Processing Locations”","citation_basis":"heading_path","char_start":30534,"char_end":30607,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" All production infrastructure hosted on GCP; physical security managed by respective cloud providers per ISO 27001 and SOC 2 Type II standards. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20All%20production%20infrastructure,Type%20II%20standards.%20","structural_citation":"Terms of Service › “Physical Security”","citation_basis":"heading_path","char_start":33837,"char_end":33982,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Napkin provides an AI-powered platform that generates visual materials including but not limited to business visuals, infographics, data charts, etc. This Privacy Policy applies to individual users and Team plan customers, except where organizations may have separate data processing agreements with us.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=%20Napkin%20provides%20an,processing%20agreements%20with%20us.","structural_citation":"Privacy Policy › “Privacy Policy - Napkin AI”","citation_basis":"heading_path","char_start":793,"char_end":1097,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" The parties acknowledge that: (a) the Customer acts as a Controller with respect to Customer Personal Data; (b) Napkin AI acts as a Processor with respect to Customer Personal Data; (c) this DPA does not establish a joint controllership arrangement under Article 26 of the GDPR; and (d) each party remains solely responsible for its own compliance obligations.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20parties%20acknowledge,its%20own%20compliance%20obligations.","structural_citation":"Terms of Service › “PREAMBLE”","citation_basis":"heading_path","char_start":878,"char_end":1239,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Supervisory Authority” \n means the competent data protection supervisory authority having jurisdiction over the relevant party under Applicable Data Protection Laws. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CSupervisory%20Authority%E2%80%9D%20means,Data%20Protection%20Laws.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":4306,"char_end":4474,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" DATA PROCESSOR: Second Layer, Inc. dba Napkin AI, a Delaware corporation, with registered address at 626 Jay Street, Los Altos, CA 94022, USA.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20DATA%20PROCESSOR%3A%20Second,Altos%2C%20CA%2094022%2C%20USA.","structural_citation":"Terms of Service › “Data Processing Agreement - Napkin AI”","citation_basis":"heading_path","char_start":148,"char_end":291,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.4.2 If Napkin AI receives a request from a Data Subject in respect of Customer Personal Data, Napkin AI shall promptly forward that request to the Customer and shall not respond to such requests directly except as directed in writing by the Customer or as required by law.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.4.2%20If%20Napkin,as%20required%20by%20law.","structural_citation":"§ 3.4.2","citation_basis":"section_number","char_start":9113,"char_end":9388,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 5.2 UK Transfers. To the extent that Napkin AI Processes UK Personal Data and transfers such data outside the United Kingdom, the parties agree that such transfers are governed by the UK IDTA. The UK IDTA is hereby incorporated into this DPA by reference, with: (a) Table 1 completed by reference to the party and transfer details set out in Annex 1; (b) Table 2 selecting the EU SCCs (Module Two, Controller to Processor) as completed in Section 5.1 of this DPA as the Linked Agreement; (c) Table 3 completed by reference to Annexes 1, 2, and 3 of this DPA; and (d) Table 4 selecting that either party may end the UK Addendum in accordance with Section 19 of the UK IDTA. By accepting this DPA, the Customer is deemed to have executed the UK Addendum. The EU SCCs form the Linked Agreement for the purposes of the UK Addendum.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.2%20UK%20Transfers.,of%20the%20UK%20Addendum.","structural_citation":"§ 5.2","citation_basis":"section_number","char_start":13515,"char_end":14343,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “GDPR” \n means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CGDPR%E2%80%9D%20means%20Regulation,of%20personal%20data.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":3065,"char_end":3254,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" (a) Module Two (Controller to Processor) of the EU SCCs applies where the Customer is a Controller and Napkin AI is a Processor;","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(a)%20Module%20Two,AI%20is%20a%20Processor%3B","structural_citation":"§ 5.1","citation_basis":"section_number","char_start":12976,"char_end":13105,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.2.2 Napkin AI may update or modify the technical and organizational measures from time to time provided the updated measures afford at least equivalent protection.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.2.2%20Napkin%20AI,at%20least%20equivalent%20protection.","structural_citation":"§ 3.2.2","citation_basis":"section_number","char_start":7178,"char_end":7344,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" The following technical and organizational measures are implemented by Napkin AI (Second Layer, Inc.) in accordance with Article 32 of the GDPR and Annex II of the EU SCCs.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20following%20technical,of%20the%20EU%20SCCs.","structural_citation":"ANNEX 3 (– TECHNICAL AND ORGANIZATIONAL MEASURES)","citation_basis":"section_number","char_start":32384,"char_end":32557,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" 3.6.2 Napkin AI may satisfy the audit obligations under this Section 3.6 by providing the Customer with a current SOC 2 Type II report or equivalent third-party audit report, subject to the Customer’s written agreement to maintain such report as confidential.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.6.2%20Napkin%20AI,such%20report%20as%20confidential.","structural_citation":"§ 3.6.2","citation_basis":"section_number","char_start":10567,"char_end":10827,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":"We are based in the United States and our data is currently hosted on secure cloud infrastructure based in the United States. This means that if you use the Service, your personal information will be transferred to and processed in the United States.","caution":"All user data is processed in the United States regardless of user location, with no data residency options mentioned for standard users.","provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=We%20are%20based%20in,in%20the%20United%20States.","structural_citation":"Privacy Policy › “International data transfers”","citation_basis":"heading_path","char_start":17980,"char_end":18230,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" The following table sets out the details of Processing activities required by Article 28(3) of the GDPR and Clause 1 of the EU SCCs.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20following%20table,of%20the%20EU%20SCCs.","structural_citation":"ANNEX 1 (– DETAILS OF PROCESSING ACTIVITIES)","citation_basis":"section_number","char_start":28740,"char_end":28873,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 4.1 The Customer represents and warrants that: (a) it has a valid lawful basis under Applicable Data Protection Laws for Processing each category of Customer Personal Data; (b) it has provided all required privacy notices to Data Subjects and obtained all required consents; and (c) it has the authority to provide Customer Personal Data to Napkin AI for Processing under this DPA.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%204.1%20The%20Customer,Processing%20under%20this%20DPA.","structural_citation":"§ 4.1","citation_basis":"section_number","char_start":10876,"char_end":11258,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 8.3 Consumer Requests. Napkin AI shall, upon the Customer’s written request, assist the Customer in fulfilling its obligations to respond to verifiable consumer requests under U.S. Privacy Laws, including requests for access, deletion, correction, and opt-out of sale or sharing, within the timelines required by applicable law.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.3%20Consumer%20Requests.,required%20by%20applicable%20law.","structural_citation":"§ 8.3","citation_basis":"section_number","char_start":20274,"char_end":20603,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “UK IDTA” \n means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses issued by the UK Information Commissioner’s Office (ICO) Version B1.0, in force 21 March 2022, as may be updated from time to time. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CUK%20IDTA%E2%80%9D%20means,time%20to%20time.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":4703,"char_end":4945,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 2.2 The details of the Processing activities, including the subject matter, nature, purpose, categories of Personal Data, and categories of Data Subjects, are set out in Annex 1 to this DPA.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%202.2%20The%20details,1%20to%20this%20DPA.","structural_citation":"§ 2.2","citation_basis":"section_number","char_start":5718,"char_end":5909,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 5.3 Transfer Impact Assessment. The Customer acknowledges that Napkin AI, as the data importer, has implemented the technical and organizational measures described in Annex 3 as supplementary measures to address any residual risks identified in connection with the transfer of Customer Personal Data to the United States.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.3%20Transfer%20Impact,to%20the%20United%20States.","structural_citation":"§ 5.3","citation_basis":"section_number","char_start":14345,"char_end":14667,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","caution":"Personal data may be transferred to countries with weaker privacy protections than the user's home jurisdiction, with no specific safeguards (e.g., SCCs, adequacy decisions) mentioned.","provenance":{"source_url":"https://www.napkin.ai/privacy","snapshot_sha256":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb","wayback_url":null,"deep_link":"https://www.napkin.ai/privacy#:~:text=We%20may%20use%20service,those%20in%20your%20jurisdiction.","structural_citation":"Privacy Policy › “International data transfers”","citation_basis":"heading_path","char_start":18233,"char_end":18421,"retrieved_at":"2026-06-07T02:14:51.679646+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" ISO 27001 certification work in progress, SOC 2 Type II audit planned for Q3 2026; GCP and other sub-processors maintain ISO 27001 and SOC 2 Type II certifications. Reports available upon written request. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20ISO%2027001%20certification,upon%20written%20request.%20","structural_citation":"Terms of Service › “Certifications”","citation_basis":"heading_path","char_start":34384,"char_end":34590,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 2.3 Napkin AI shall promptly inform the Customer if, in Napkin AI’s opinion, any instruction from the Customer infringes Applicable Data Protection Laws, provided that Napkin AI shall have no obligation to conduct legal analysis on behalf of the Customer.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%202.3%20Napkin%20AI,behalf%20of%20the%20Customer.","structural_citation":"§ 2.3","citation_basis":"section_number","char_start":5911,"char_end":6167,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 3.5.1 Napkin AI shall reasonably assist the Customer in ensuring compliance with the Customer’s security obligations under Article 32, breach notification obligations under Articles 33 and 34, data protection impact assessment obligations under Article 35, and prior consultation obligations under Article 36 of the GDPR, taking into account the nature of the Processing and the information available to Napkin AI. Napkin AI may charge reasonable, documented fees for compliance assistance that exceed Napkin AI’s ordinary course of business.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.5.1%20Napkin%20AI,ordinary%20course%20of%20business.","structural_citation":"§ 3.5.1","citation_basis":"section_number","char_start":9428,"char_end":9971,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “EU SCCs” \n means the standard contractual clauses for the transfer of Personal Data to third countries approved by the European Commission under Decision 2021/914 of 4 June 2021, as may be amended or replaced from time to time. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CEU%20SCCs%E2%80%9D%20means,time%20to%20time.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":2829,"char_end":3059,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 4.4 The Customer shall promptly notify Napkin AI of any changes to its instructions that may affect the lawfulness of Processing and shall cooperate with Napkin AI in implementing any required changes.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%204.4%20The%20Customer,implementing%20any%20required%20changes.","structural_citation":"§ 4.4","citation_basis":"section_number","char_start":12269,"char_end":12471,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 12.4 Severability. If any provision of this DPA is held invalid, unlawful, or unenforceable, the remaining provisions shall continue in full force and effect. The parties shall, in good faith, negotiate a replacement provision that is valid, lawful, and enforceable and that achieves, to the greatest extent possible, the original intention of the replaced provision.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.4%20Severability.%20If,of%20the%20replaced%20provision.","structural_citation":"§ 12.4","citation_basis":"section_number","char_start":27353,"char_end":27721,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" (d) Clause 18 (choice of forum) – the courts of France shall have jurisdiction.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(d)%20Clause%2018,France%20shall%20have%20jurisdiction.","structural_citation":"§ 5.1","citation_basis":"section_number","char_start":13306,"char_end":13386,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 12.5 Governing Law. This DPA shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of laws provisions. The EU SCCs shall be governed by the laws of France, as set out in Section 5.1.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.5%20Governing%20Law.,out%20in%20Section%205.1.","structural_citation":"§ 12.5","citation_basis":"section_number","char_start":27723,"char_end":27987,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" In the event of any conflict between this DPA and the Agreement, the provisions of this DPA shall prevail with respect to the subject matter hereof.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20In%20the%20event,the%20subject%20matter%20hereof.","structural_citation":"Terms of Service › “PREAMBLE”","citation_basis":"heading_path","char_start":1241,"char_end":1390,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Effective Date” \n means the date on which the Customer first accepts the Napkin AI Terms of Service, creates an account, or accesses the Services, whichever occurs first. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CEffective%20Date%E2%80%9D%20means,whichever%20occurs%20first.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":2650,"char_end":2823,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 12.1 Order of Precedence. In the event of any inconsistency between this DPA and the Agreement with respect to data protection matters, this DPA shall prevail. In the event of any inconsistency between this DPA and the EU SCCs, the EU SCCs shall prevail.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.1%20Order%20of,EU%20SCCs%20shall%20prevail.","structural_citation":"§ 12.1","citation_basis":"section_number","char_start":25821,"char_end":26076,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" 12.2 Entire Agreement. This DPA, together with the Agreement and the Annexes hereto, constitutes the entire agreement between the parties with respect to the processing of Customer Personal Data and supersedes all prior or contemporaneous agreements, representations, and understandings relating to the same subject matter.","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.2%20Entire%20Agreement.,the%20same%20subject%20matter.","structural_citation":"§ 12.2","citation_basis":"section_number","char_start":26078,"char_end":26402,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Second Layer, Inc. dba Napkin AI, a Delaware corporation, with registered address at 626 Jay Street, Los Altos, CA 94022, USA. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Second%20Layer%2C%20Inc.,CA%2094022%2C%20USA.%20","structural_citation":"Terms of Service › “Data Importer (Processor)”","citation_basis":"heading_path","char_start":29068,"char_end":29196,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" OpenAI, L.L.C. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20OpenAI%2C%20L.L.C.%20","structural_citation":"Terms of Service › “Privacy Policy”","citation_basis":"heading_path","char_start":31038,"char_end":31054,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Sentry (Functional Software, Inc.) ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Sentry%20(Functional%20Software%2C%20Inc.)%20","structural_citation":"Terms of Service › “Business intelligence and analytics”","citation_basis":"heading_path","char_start":31845,"char_end":31881,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}},{"surface":"governing_law_disputes","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" “Agreement” \n means the Napkin AI Terms of Service available at https://www.napkin.ai/terms-conditions/ , as accepted by the Customer upon account creation or use of the Services, together with any applicable enterprise agreement, Order Form, or addenda executed between the parties. ","caution":null,"provenance":{"source_url":"https://www.napkin.ai/data-processing-agreement","snapshot_sha256":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e","wayback_url":null,"deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CAgreement%E2%80%9D%20means%20the,between%20the%20parties.%20","structural_citation":"SECTION 1 (– DEFINITIONS)","citation_basis":"section_number","char_start":1436,"char_end":1721,"retrieved_at":"2026-06-10T04:00:51.573997+00:00"}}],"documents":[{"doc_type":"privacy","pdf_page_count":null,"extraction_method":"static","page_level_citations":false,"last_captured":"2026-07-27","last_verified_scan":"2026-07-27","verified_scan_count":3},{"doc_type":"terms","pdf_page_count":null,"extraction_method":"static","page_level_citations":false,"last_captured":"2026-07-20","last_verified_scan":"2026-07-20","verified_scan_count":2}],"clause_intelligence":{"clauses_count":302,"risk_patterns_count":32,"stance_events_count":32,"patterns_by_family":{"data_retention":3,"ip_ownership":2,"privacy_sharing":22,"tier_conditionality":1,"training_use":4},"risk_summary":{"medium":25,"high":4,"low":3},"evidence":[{"pattern_key":"indefinite_or_necessity_retention","pattern_family":"data_retention","risk_rating":"medium","confidence":"high","stance_key":"retention","stance_value":"indefinite_or_necessity_based","evidence":"We generally retain information for as long as necessary to provide the service, to fulfill the purposes outlined in this Privacy Policy, to comply with legal, accounting, contractual, or operational obligations, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the...","reason":"The clause allows indefinite, perpetual, or necessity-based retention.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We generally retain information for as long as necessary to provide the service, to fulfill the purposes outlined in this Privacy Policy, to comply with legal, accounting, contractual, or operational obligations, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20generally%20retain,the%20applicable%20legal%20requirements.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":8483,"char_end":9178}},{"pattern_key":"indefinite_or_necessity_retention","pattern_family":"data_retention","risk_rating":"medium","confidence":"medium","stance_key":"retention","stance_value":"indefinite_or_necessity_based","evidence":"We generally retain information for as long as necessary to provide the service, to fulfill the purposes outlined in this Privacy Policy, to comply with legal, accounting, contractual, or operational obligations, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the...","reason":"The clause allows indefinite, perpetual, or necessity-based retention.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We generally retain information for as long as necessary to provide the service, to fulfill the purposes outlined in this Privacy Policy, to comply with legal, accounting, contractual, or operational obligations, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20generally%20retain,the%20applicable%20legal%20requirements.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":8491,"char_end":9186}},{"pattern_key":"indefinite_or_necessity_retention","pattern_family":"data_retention","risk_rating":"medium","confidence":"medium","stance_key":"retention","stance_value":"indefinite_or_necessity_based","evidence":"We generally retain information for as long as necessary to provide the service, to fulfill the purposes outlined in this Privacy Policy, to comply with legal, accounting, contractual, or operational obligations, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the...","reason":"The clause allows indefinite, perpetual, or necessity-based retention.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"We generally retain information for as long as necessary to provide the service, to fulfill the purposes outlined in this Privacy Policy, to comply with legal, accounting, contractual, or operational obligations, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20generally%20retain,the%20applicable%20legal%20requirements.","structural_citation":"Privacy Policy › “Retention”","citation_basis":"heading_path","char_start":8505,"char_end":9200}},{"pattern_key":"platform_claims_ownership","pattern_family":"ip_ownership","risk_rating":"high","confidence":"high","stance_key":"content_ownership","stance_value":"platform_claims_or_reserves_rights","evidence":"We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the S...","reason":"The clause appears to reserve or claim ownership rights for the platform.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20reserve%20the,Service%20and%20our%20business.","structural_citation":"Privacy Policy › “Changes to this Privacy Policy”","citation_basis":"heading_path","char_start":19005,"char_end":19611}},{"pattern_key":"platform_claims_ownership","pattern_family":"ip_ownership","risk_rating":"high","confidence":"low","stance_key":"content_ownership","stance_value":"platform_claims_or_reserves_rights","evidence":"We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the S...","reason":"The clause appears to reserve or claim ownership rights for the platform.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"moderation_enforcement","quote":"We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=We%20reserve%20the%20right,Service%20and%20our%20business.","structural_citation":"Privacy Policy › “Changes to this Privacy Policy”","citation_basis":"heading_path","char_start":19006,"char_end":19611}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"8.2 Service Provider Designation. For purposes of the CCPA/CPRA, Napkin AI is a “service provider” and “contractor” with respect to Customer Personal Data. Napkin AI shall not: (a) sell or share Customer Personal Data (as those terms are defined under CCPA/CPRA); (b) retain, use, or disclose Customer Personal Data for any purpose other than the business purposes specified in this DPA and the Agreement; or (c) comb...","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"8.2 Service Provider Designation. For purposes of the CCPA/CPRA, Napkin AI is a “service provider” and “contractor” with respect to Customer Personal Data. Napkin AI shall not: (a) sell or share Customer Personal Data (as those terms are defined under CCPA/CPRA); (b) retain, use, or disclose Customer Personal Data for any purpose other than the business purposes specified in this DPA and the Agreement; or (c) combine Customer Personal Data received from the Customer with personal information received from other sources except as permitted by U.S. Privacy Laws.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.2%20Service%20Provider,by%20U.S.%20Privacy%20Laws.","structural_citation":"§ 8.2","citation_basis":"section_number","char_start":19713,"char_end":20280}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"These service providers process personal data only on our instructions and under strict confidentiality agreements.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"These service providers process personal data only on our instructions and under strict confidentiality agreements.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20These%20service%20providers,under%20strict%20confidentiality%20agreements.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11056,"char_end":11172}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, such as: Google Cloud Platform (hosting and infrastructure) Intercom (customer support and communication) Sendgrid and Mailmodo (email delivery) Sentry (error and performance monitoring) Google Analytics (product analytics) OpenAI and Gemini (AI-powered generation and processing services) These serv...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, such as: Google Cloud Platform (hosting and infrastructure) Intercom (customer support and communication) Sendgrid and Mailmodo (email delivery) Sentry (error and performance monitoring) Google Analytics (product analytics) OpenAI and Gemini (AI-powered generation and processing services) These service providers process personal data only on our instructions and under strict confidentiality agreements.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=Service%20providers.%20Third%20parties,under%20strict%20confidentiality%20agreements.","structural_citation":"Privacy Policy › “How we share your personal information”","citation_basis":"heading_path","char_start":10632,"char_end":11172}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20may%20use,those%20in%20your%20jurisdiction.","structural_citation":"Privacy Policy › “International data transfers”","citation_basis":"heading_path","char_start":18232,"char_end":18421}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=We%20may%20use%20service,those%20in%20your%20jurisdiction.","structural_citation":"Privacy Policy › “International data transfers”","citation_basis":"heading_path","char_start":18233,"char_end":18421}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so, such as when you share content with collaborators, or connect third-party services. We only share information that is needed for these other companies to provide the services that you have requested.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so, such as when you share content with collaborators, or connect third-party services. We only share information that is needed for these other companies to provide the services that you have requested.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Third%20parties%20designated,that%20you%20have%20requested.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11447,"char_end":11802}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for the following marketing purposes:","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for the following marketing purposes:","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Marketing.%20We%2C%20our,the%20following%20marketing%20purposes%3A","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6712,"char_end":6874}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the d...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=We%20may%20use%20your,and%20promote%20our%20business.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6050,"char_end":6710}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing in...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Research%20and%20development.,and%20promote%20our%20business.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6023,"char_end":6710}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Automatic%20data%20collection.,online%20services%2C%20such%20as%3A","structural_citation":"Privacy Policy › “Personal information we collect”","citation_basis":"heading_path","char_start":3682,"char_end":3943}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing in...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Research%20and%20development.,and%20promote%20our%20business.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6031,"char_end":6718}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for the following marketing purposes:","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for the following marketing purposes:","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Marketing.%20We%2C%20our,the%20following%20marketing%20purposes%3A","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6720,"char_end":6882}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"These service providers process personal data only on our instructions and under strict confidentiality agreements.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"These service providers process personal data only on our instructions and under strict confidentiality agreements.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20These%20service%20providers,under%20strict%20confidentiality%20agreements.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11064,"char_end":11180}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so, such as when you share content with collaborators, or connect third-party services. We only share information that is needed for these other companies to provide the services that you have requested.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so, such as when you share content with collaborators, or connect third-party services. We only share information that is needed for these other companies to provide the services that you have requested.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Third%20parties%20designated,that%20you%20have%20requested.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11455,"char_end":11810}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20may%20use,those%20in%20your%20jurisdiction.","structural_citation":"Privacy Policy › “International data transfers”","citation_basis":"heading_path","char_start":18240,"char_end":18429}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"8.2 Service Provider Designation. For purposes of the CCPA/CPRA, Napkin AI is a “service provider” and “contractor” with respect to Customer Personal Data. Napkin AI shall not: (a) sell or share Customer Personal Data (as those terms are defined under CCPA/CPRA); (b) retain, use, or disclose Customer Personal Data for any purpose other than the business purposes specified in this DPA and the Agreement; or (c) comb...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"8.2 Service Provider Designation. For purposes of the CCPA/CPRA, Napkin AI is a “service provider” and “contractor” with respect to Customer Personal Data. Napkin AI shall not: (a) sell or share Customer Personal Data (as those terms are defined under CCPA/CPRA); (b) retain, use, or disclose Customer Personal Data for any purpose other than the business purposes specified in this DPA and the Agreement; or (c) combine Customer Personal Data received from the Customer with personal information received from other sources except as permitted by U.S. Privacy Laws.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.2%20Service%20Provider,by%20U.S.%20Privacy%20Laws.","structural_citation":"§ 8.2","citation_basis":"section_number","char_start":19713,"char_end":20280}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"8.5 Certification. Napkin AI certifies that it understands and will comply with its obligations as a service provider and contractor under the CCPA/CPRA, including the restrictions on use and disclosure of Customer Personal Data set forth in this Section 8.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"8.5 Certification. Napkin AI certifies that it understands and will comply with its obligations as a service provider and contractor under the CCPA/CPRA, including the restrictions on use and disclosure of Customer Personal Data set forth in this Section 8.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.5%20Certification.%20Napkin,in%20this%20Section%208.","structural_citation":"§ 8.5","citation_basis":"section_number","char_start":20909,"char_end":21167}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing in...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Research%20and%20development.,and%20promote%20our%20business.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6045,"char_end":6732}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for the following marketing purposes:","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for the following marketing purposes:","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Marketing.%20We%2C%20our,the%20following%20marketing%20purposes%3A","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6734,"char_end":6896}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"These service providers process personal data only on our instructions and under strict confidentiality agreements.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"These service providers process personal data only on our instructions and under strict confidentiality agreements.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20These%20service%20providers,under%20strict%20confidentiality%20agreements.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11078,"char_end":11194}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so, such as when you share content with collaborators, or connect third-party services. We only share information that is needed for these other companies to provide the services that you have requested.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so, such as when you share content with collaborators, or connect third-party services. We only share information that is needed for these other companies to provide the services that you have requested.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Third%20parties%20designated,that%20you%20have%20requested.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”","citation_basis":"heading_path","char_start":11469,"char_end":11824}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20may%20use,those%20in%20your%20jurisdiction.","structural_citation":"Privacy Policy › “International data transfers”","citation_basis":"heading_path","char_start":18254,"char_end":18443}},{"pattern_key":"tier_condition","pattern_family":"tier_conditionality","risk_rating":"medium","confidence":"low","stance_key":"tier_condition","stance_value":"rights_or_controls_vary_by_tier","evidence":"This Privacy Policy applies to individual users and Team plan customers, except where organizations may have separate data processing agreements with us.","reason":"The clause changes rights, controls, or obligations by plan or tier.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"tier_differences","quote":"This Privacy Policy applies to individual users and Team plan customers, except where organizations may have separate data processing agreements with us.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=This%20Privacy%20Policy%20applies,processing%20agreements%20with%20us.","structural_citation":"Privacy Policy › “Privacy Policy - Napkin AI”","citation_basis":"heading_path","char_start":944,"char_end":1097}},{"pattern_key":"training_permitted","pattern_family":"training_use","risk_rating":"high","confidence":"medium","stance_key":"model_training","stance_value":"training_permitted","evidence":"We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the d...","reason":"The clause permits using submitted content for training, development, or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=We%20may%20use%20your,and%20promote%20our%20business.","structural_citation":"Privacy Policy › “How we use your personal information”","citation_basis":"heading_path","char_start":6050,"char_end":6710}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"7.1.1 Napkin AI shall not use Customer Personal Data for the purpose of training, retraining, fine-tuning, or otherwise developing any artificial intelligence or machine learning models.","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"7.1.1 Napkin AI shall not use Customer Personal Data for the purpose of training, retraining, fine-tuning, or otherwise developing any artificial intelligence or machine learning models.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.1%20Napkin%20AI,or%20machine%20learning%20models.","structural_citation":"§ 7.1.1","citation_basis":"section_number","char_start":17208,"char_end":17395}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"7.2.2 Zero-Data-Retention Disclosure: Napkin AI maintains zero-data-retention (ZDR) agreements with all large language model providers engaged to process Customer Personal Data. Under these agreements, Customer Personal Data submitted to those providers is not retained beyond the immediate processing request and is not used by those providers for model training, fine-tuning, or any other independent purpose.","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"7.2.2 Zero-Data-Retention Disclosure: Napkin AI maintains zero-data-retention (ZDR) agreements with all large language model providers engaged to process Customer Personal Data. Under these agreements, Customer Personal Data submitted to those providers is not retained beyond the immediate processing request and is not used by those providers for model training, fine-tuning, or any other independent purpose.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.2.2%20Zero-Data-Retention%20Disclosure%3A,any%20other%20independent%20purpose.","structural_citation":"§ 7.2.2","citation_basis":"section_number","char_start":18772,"char_end":19184}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"NOTE RE: AI SUB-PROCESSORS – ZERO DATA RETENTION: Napkin AI maintains zero-data-retention (ZDR) agreements with all AI inference sub-processors (currently Google Cloud AI and OpenAI). Customer Personal Data submitted to these providers is not retained beyond the immediate processing request and is not used for model training by those providers.","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"NOTE RE: AI SUB-PROCESSORS – ZERO DATA RETENTION: Napkin AI maintains zero-data-retention (ZDR) agreements with all AI inference sub-processors (currently Google Cloud AI and OpenAI). Customer Personal Data submitted to these providers is not retained beyond the immediate processing request and is not used for model training by those providers.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20NOTE%20RE%3A%20AI,training%20by%20those%20providers.","structural_citation":"Terms of Service › “Error monitoring and crash reporting”","citation_basis":"heading_path","char_start":31983,"char_end":32330}}]},"tier_conditions":[{"tier":"Business","surface":"audit_rights_dpa_residency","verdict":"conditional","confidence":"high","citation_count":3,"citations":[{"finding_id":"860edfb0-e487-48cd-a298-3a76500e4e9d","quote":" 3.6.1 Napkin AI shall make available to the Customer all information reasonably necessary to demonstrate compliance with this DPA and shall allow for and contribute to audits and inspections conducted by the Customer or a qualified third-party auditor appointed by the Customer. The Customer shall provide at least thirty (30) days’ prior written notice of any audit request; audits shall be conducted during normal business hours, no more than once per calendar year, absent a confirmed Personal Data Breach, and the Customer shall bear all costs of such audit.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.6.1%20Napkin%20AI,costs%20of%20such%20audit.","structural_citation":"§ 3.6.1"},{"finding_id":"bf996bf2-1f52-4b8d-9c5f-9f24ea1069cc","quote":" Napkin provides an AI-powered platform that generates visual materials including but not limited to business visuals, infographics, data charts, etc. This Privacy Policy applies to individual users and Team plan customers, except where organizations may have separate data processing agreements with us.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Napkin%20provides%20an,processing%20agreements%20with%20us.","structural_citation":"Privacy Policy › “Privacy Policy - Napkin AI”"},{"finding_id":"f366f64b-8ad5-468c-91f5-a89b260720ec","quote":" 3.5.1 Napkin AI shall reasonably assist the Customer in ensuring compliance with the Customer’s security obligations under Article 32, breach notification obligations under Articles 33 and 34, data protection impact assessment obligations under Article 35, and prior consultation obligations under Article 36 of the GDPR, taking into account the nature of the Processing and the information available to Napkin AI. Napkin AI may charge reasonable, documented fees for compliance assistance that exceed Napkin AI’s ordinary course of business.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.5.1%20Napkin%20AI,ordinary%20course%20of%20business.","structural_citation":"§ 3.5.1"}]},{"tier":"Business","surface":"data_retention","verdict":"conditional","confidence":"high","citation_count":1,"citations":[{"finding_id":"b30da08c-2de1-4f6b-b21c-c3d4acef04df","quote":" Business Continuity Plan (BCP) reviewed annually; daily automated backups with 30-day retention; RTO: 24 hours; RPO: 24 hours. ","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Business%20Continuity%20Plan,RPO%3A%2024%20hours.%20","structural_citation":"Terms of Service › “Business Continuity”"}]},{"tier":"Business","surface":"moderation_enforcement","verdict":"conditional","confidence":"high","citation_count":1,"citations":[{"finding_id":"6cb91b65-1181-406d-9759-4db6ec0eca07","quote":" We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20We%20reserve%20the,Service%20and%20our%20business.","structural_citation":"Privacy Policy › “Changes to this Privacy Policy”"}]},{"tier":"Business","surface":"privacy_data_use","verdict":"improves","confidence":"high","citation_count":5,"citations":[{"finding_id":"75f1ac6a-7da2-4882-9bee-a5e0a274c75d","quote":" 7.1.2 Napkin AI provides Customers with a mechanism to opt out of all non-essential data use. Where the Customer exercises such opt-out (via Account Settings, Teamspace settings), Napkin AI shall process Customer Personal Data solely to deliver the Services and shall not use any Customer interaction data for any purpose beyond service delivery. Opt-out requests will be honoured within two (2) business days.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.2%20Napkin%20AI,two%20(2)%20business%20days.","structural_citation":"§ 7.1.2"},{"finding_id":"a33f5fa1-31e2-4975-88ff-801046bdcbf3","quote":" Service improvement and analytics. We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Service%20improvement%20and,new%20products%20and%20services.","structural_citation":"Privacy Policy › “How we use your personal information”"},{"finding_id":"cafbf7a2-9073-43c2-b42a-468a3d47b510","quote":" Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Automatic%20data%20collection.,online%20services%2C%20such%20as%3A","structural_citation":"Privacy Policy › “Personal information we collect”"},{"finding_id":"ba0abd40-8d1b-441a-a9cb-a398c376631f","quote":" Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Research%20and%20development.,and%20promote%20our%20business.","structural_citation":"Privacy Policy › “How we use your personal information”"},{"finding_id":"4947b711-72e1-42e0-8ce6-32d73faff731","quote":" provide, operate and improve the Service and our business;","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20provide%2C%20operate%20and,Service%20and%20our%20business%3B","structural_citation":"Privacy Policy › “How we use your personal information”"}]},{"tier":"Business","surface":"subprocessors_data_sharing","verdict":"conditional","confidence":"high","citation_count":4,"citations":[{"finding_id":"496ddf1e-cdc3-4934-830e-ae7f1d897c29","quote":"Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, such as:\n\n \n Google Cloud Platform (hosting and infrastructure)\n\n Intercom (customer support and communication)\n\n Sendgrid and Mailmodo (email delivery)\n\n Sentry (error and performance monitoring)\n\n Google Analytics (product analytics)\n\n OpenAI and Gemini (AI-powered generation and processing services)\n\n \n These service providers process personal data only on our instructions and under strict confidentiality agreements.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=Service%20providers.%20Third%20parties,under%20strict%20confidentiality%20agreements.","structural_citation":"Privacy Policy › “How we share your personal information”"},{"finding_id":"529deb9b-7222-4c8f-8959-157d89d2a4a0","quote":" 8.2 Service Provider Designation. For purposes of the CCPA/CPRA, Napkin AI is a “service provider” and “contractor” with respect to Customer Personal Data. Napkin AI shall not: (a) sell or share Customer Personal Data (as those terms are defined under CCPA/CPRA); (b) retain, use, or disclose Customer Personal Data for any purpose other than the business purposes specified in this DPA and the Agreement; or (c) combine Customer Personal Data received from the Customer with personal information received from other sources except as permitted by U.S. Privacy Laws.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.2%20Service%20Provider,by%20U.S.%20Privacy%20Laws.","structural_citation":"§ 8.2"},{"finding_id":"2b7e3747-404b-41b3-ac9e-381b7e14f907","quote":" Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, such as:","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Service%20providers.%20Third,our%20business%2C%20such%20as%3A","structural_citation":"Privacy Policy › “How we share your personal information”"},{"finding_id":"45a5987a-9c1f-459d-bbf2-94048f427445","quote":" Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in Napkin, financing of Napkin, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares), for example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Napkin as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Business%20transferees.%20We,of%20our%20business%20assets.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"}]},{"tier":"Enterprise","surface":"audit_rights_dpa_residency","verdict":"conditional","confidence":"high","citation_count":3,"citations":[{"finding_id":"7eeeea2a-ccac-462b-9e56-732cd2c3fc16","quote":" DATA CONTROLLER: The entity or individual (“Customer”) that accepts the Napkin AI Terms of Service or executes an enterprise agreement with Napkin AI.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20DATA%20CONTROLLER%3A%20The,agreement%20with%20Napkin%20AI.","structural_citation":"Terms of Service › “Data Processing Agreement - Napkin AI”"},{"finding_id":"7acbf3ea-9c34-49e7-b081-5eb48957cdb1","quote":" 12.7 Acceptance. By creating a Napkin AI account, accepting the Terms of Service, or using the Services, the Customer acknowledges that it has read, understood, and agrees to be bound by this DPA. For enterprise customers with separately executed agreements, this DPA may also be executed in counterparts, including by electronic signature via DocuSign or equivalent platform.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.7%20Acceptance.%20By,DocuSign%20or%20equivalent%20platform.","structural_citation":"§ 12.7"},{"finding_id":"df51d295-cfd2-4bcc-a0b7-b981ac6c1dba","quote":" 12.3 Amendments. Napkin AI may update this DPA from time to time. For changes required by applicable law or that expand privacy protections for Customers, updates take effect immediately upon publication at https://www.napkin.ai/data-processing-agreement/ . For material changes; defined as changes that (a) add new categories of personal data processed, (b) add new purposes of processing, or (c) materially reduce Customer rights under this DPA, Napkin AI will provide at least thirty (30) days' notice by updating the DPA page at https://www.napkin.ai/data-processing-agreement/ with a summary of the changes and the date they take effect. Enterprise customers with separately executed DPAs will receive direct email notice of material changes. Continued use of the Services after the effective date of any update constitutes acceptance. Sub-processor changes are governed exclusively by Section 3.3.1 and are not subject to this Section 12.3.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.3%20Amendments.%20Napkin,to%20this%20Section%2012.3.","structural_citation":"§ 12.3"}]},{"tier":"Enterprise","surface":"governing_law_disputes","verdict":"conditional","confidence":"high","citation_count":1,"citations":[{"finding_id":"37c9f3e9-d046-470d-bc08-7ad3f64d452c","quote":" “Agreement” \n means the Napkin AI Terms of Service available at https://www.napkin.ai/terms-conditions/ , as accepted by the Customer upon account creation or use of the Services, together with any applicable enterprise agreement, Order Form, or addenda executed between the parties. ","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CAgreement%E2%80%9D%20means%20the,between%20the%20parties.%20","structural_citation":"SECTION 1 (– DEFINITIONS)"}]},{"tier":"Enterprise","surface":"moderation_enforcement","verdict":"conditional","confidence":"high","citation_count":1,"citations":[{"finding_id":"fa8aa2a7-770b-4592-895e-a15be08b72ad","quote":" The Customer, being the entity that has accepted the Napkin AI Terms of Service or executed an enterprise agreement. ","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20Customer%2C%20being,an%20enterprise%20agreement.%20","structural_citation":"Terms of Service › “Data Exporter (Controller)”"}]},{"tier":"Government","surface":"privacy_data_use","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"46e70b39-2576-4315-a85a-4dfbad6237b3","quote":" Public sources , such as government agencies, public records, social media platforms, and other publicly available sources.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Public%20sources%20%2C,other%20publicly%20available%20sources.","structural_citation":"Privacy Policy › “Personal information we collect”"}]},{"tier":"Government","surface":"subprocessors_data_sharing","verdict":"conditional","confidence":"high","citation_count":3,"citations":[{"finding_id":"6ca1afc4-342e-4a45-9782-ae1f34487c7a","quote":" comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20comply%20with%20applicable,requests%20from%20government%20authorities%3B","structural_citation":"Privacy Policy › “How we use your personal information”"},{"finding_id":"73f631a9-f2b0-428d-8b04-597ae3ae079e","quote":" 5.5 Government Agency Requests. As of the Effective Date of this DPA, Napkin AI (and Second Layer, Inc.) has not received any formal legal requests from any government intelligence or security agency for access to Customer Personal Data. If Napkin AI receives any such request after the Effective Date, Napkin AI shall: (a) to the extent permitted by applicable law, promptly notify the Customer; (b) use commercially reasonable efforts to redirect the relevant law enforcement or government agency to request that data directly from the Customer; and (c) provide the Customer with reasonable notice of any such demand unless legally prohibited from doing so by a court of competent jurisdiction or applicable law.","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.5%20Government%20Agency,jurisdiction%20or%20applicable%20law.","structural_citation":"§ 5.5"},{"finding_id":"c74cd89b-a54b-4d09-8a52-7c81c7d9d388","quote":" Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Authorities%20and%20others.,protection%20purposes%20described%20above.","structural_citation":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"}]},{"tier":"Paid","surface":"subprocessors_data_sharing","verdict":"conditional","confidence":"high","citation_count":1,"citations":[{"finding_id":"95b44d25-ee32-4d94-8cc2-a853ab396d78","quote":" Our affiliate partners , such as our affiliate network provider and publishers, influencers, and promoters who participate in our paid affiliate programs.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20Our%20affiliate%20partners,our%20paid%20affiliate%20programs.","structural_citation":"Privacy Policy › “Personal information we collect”"}]},{"tier":"Standard","surface":"audit_rights_dpa_residency","verdict":"unknown","confidence":"high","citation_count":3,"citations":[{"finding_id":"8e026293-4b7f-424f-9135-7a95d7f7d5dc","quote":" 5.1 EU Standard Contractual Clauses. To the extent that Napkin AI Processes Customer Personal Data originating from the European Economic Area (“EEA”) and transfers such data to the United States or any other country that has not been the subject of an adequacy decision by the European Commission, the parties agree that such transfers are made pursuant to the EU SCCs, which are incorporated into this DPA by reference, and completed as follows:","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.1%20EU%20Standard,and%20completed%20as%20follows%3A","structural_citation":"§ 5.1"},{"finding_id":"4002265a-f5ad-4f9d-b151-cc67b904867d","quote":" “UK IDTA” \n means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses issued by the UK Information Commissioner’s Office (ICO) Version B1.0, in force 21 March 2022, as may be updated from time to time. ","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CUK%20IDTA%E2%80%9D%20means,time%20to%20time.%20","structural_citation":"SECTION 1 (– DEFINITIONS)"},{"finding_id":"db84d64c-1039-4939-9a1f-5e94889b0dfa","quote":" “EU SCCs” \n means the standard contractual clauses for the transfer of Personal Data to third countries approved by the European Commission under Decision 2021/914 of 4 June 2021, as may be amended or replaced from time to time. ","source_url":"https://www.napkin.ai/data-processing-agreement","deep_link":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CEU%20SCCs%E2%80%9D%20means,time%20to%20time.%20","structural_citation":"SECTION 1 (– DEFINITIONS)"}]},{"tier":"Standard","surface":"data_retention","verdict":"improves","confidence":"high","citation_count":1,"citations":[{"finding_id":"3a54ba21-e047-4e41-a903-6bf2f0e9caea","quote":" When you ask us to delete your account , most personal data is scheduled for deletion immediately from active systems and you will no longer appear in any user-facing parts of the Service. However, some data may be temporarily retained in secure backups for a limited period for operational, legal, or security reasons such as fraud prevention or dispute handling. These backups are automatically purged after our standard retention window, and the data is not actively used during that time. No personal data is kept longer than necessary, and we will not retain data beyond what is required by law or for legitimate business purposes.","source_url":"https://www.napkin.ai/privacy","deep_link":"https://www.napkin.ai/privacy#:~:text=%20When%20you%20ask,for%20legitimate%20business%20purposes.","structural_citation":"Privacy Policy › “Retention”"}]}],"disclaimer":"Informational only, not legal advice. Every finding is a verbatim quote from a fully-read, gate-verified document; verify via snapshot_sha256 + wayback_url. Partially-verified platforms show findings only from their verified document(s).","benchmark":{"disclaimer":"Automated assessment against a published rubric — not legal advice.","bands":[]},"@jsonld":{"@context":"https://schema.org","@type":"Dataset","name":"Napkin AI — AI policy risk findings","description":"Verified, cited policy findings for Napkin AI across 13 risk surfaces.","url":"https://airinetwork.com/platform/napkin-ai","creator":{"@type":"Organization","name":"AIRIN","url":"https://airinetwork.com"},"isAccessibleForFree":true,"license":"https://airinetwork.com/terms","additionalProperty":[{"@type":"PropertyValue","name":"verification","value":"fully_verified"},{"@type":"PropertyValue","name":"tier_condition_count","value":13}],"variableMeasured":[{"@type":"PropertyValue","name":"prompt_ownership","value":"low","description":" User-generated content , such as input text, visuals, generated text, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20User-generated%20content%20%2C,well%20as%20associated%20metadata."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"training_use","value":"medium","description":" 7.1.3 Where the Customer has not opted out, Napkin AI may use: (a) anonymized and aggregated interaction data, from which all personal identifiers have been removed; and (b) de-identified content data (visual and diagram content from which all personally identifiable information has been removed), solely for the purpose of improving the Services and Napkin AI’s AI models (“Model Improvement Processing”). Such use shall not re-identify any individual or Customer.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7.1.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.3%20Where%20the,any%20individual%20or%20Customer."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"training_use","value":"low","description":" 7.2.2 Zero-Data-Retention Disclosure: Napkin AI maintains zero-data-retention (ZDR) agreements with all large language model providers engaged to process Customer Personal Data. Under these agreements, Customer Personal Data submitted to those providers is not retained beyond the immediate processing request and is not used by those providers for model training, fine-tuning, or any other independent purpose.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7.2.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.2.2%20Zero-Data-Retention%20Disclosure%3A,any%20other%20independent%20purpose."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"training_use","value":"low","description":" 7.1.1 Napkin AI shall not use Customer Personal Data for the purpose of training, retraining, fine-tuning, or otherwise developing any artificial intelligence or machine learning models.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7.1.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.1%20Napkin%20AI,or%20machine%20learning%20models."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" With your consent. In some cases, we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20With%20your%20consent.,when%20required%20by%20law."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" https://www.mailmodo.com/privacy ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Email campaign delivery”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fwww.mailmodo.com%2Fprivacy%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" “CCPA/CPRA” \n means the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, together with all implementing regulations. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CCCPA%2FCPRA%E2%80%9D%20means%20the,all%20implementing%20regulations.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 8.4 Napkin AI shall promptly notify the Customer if Napkin AI determines that it can no longer meet its obligations under applicable U.S. Privacy Laws. Upon such notification, the Customer may direct Napkin AI to take reasonable steps to remediate the issue or terminate the relevant Services.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.4%20Napkin%20AI,terminate%20the%20relevant%20Services."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Production environment isolated; web application firewall (WAF) deployed; DDoS protection enabled. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Network Security”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Production%20environment%20isolated%3B,DDoS%20protection%20enabled.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20prevent%2C%20identify%2C%20investigate,cyberattacks%20and%20identity%20theft."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" To exercise these rights, please contact us at [email protected] . We may request specific information from you to help us confirm your identity and process your request.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Withdraw consent where it was previously given”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20To%20exercise%20these,and%20process%20your%20request."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" This Privacy Policy describes how Second Layer, Inc. (\"Napkin,\" \"we,\" \"us\" or \"our\") processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including as applicable, our website located at https://www.napkin.ai , marketing activities, live events and other activities described in this Privacy Policy (collectively, the \"Service\")). Napkin may provide additional or supplemental privacy policies to individuals for specific products or services that we offer at the time we collect personal information.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Privacy Policy - Napkin AI”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20This%20Privacy%20Policy,we%20collect%20personal%20information."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Mail: Second Layer, Inc., 626 Jay Street, Los Altos, CA 94022","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data Protection Officer: Erwan Martin — [email protected]”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Mail%3A%20Second%20Layer%2C,Los%20Altos%2C%20CA%2094022"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Teamspace content: If you create content within a Teamspace, other Teamspace members may have access to that content as determined by the Teamspace Administrator.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Teamspace%20content%3A%20If,by%20the%20Teamspace%20Administrator."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 6.5 Napkin AI shall maintain records of all confirmed Personal Data Breaches, including the facts relating to the breach, its effects, and the remedial actions taken, and shall make such records available to the Customer upon written request.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6.5"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.5%20Napkin%20AI,Customer%20upon%20written%20request."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Other%20data%20not,the%20time%20of%20collection."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Device data , such as your computer or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Device%20data%20%2C,state%20or%20geographic%20area."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Communication interaction data such as your interactions with our email, text or other communications (e.g., whether you open our emails) – we may do this through the use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Communication%20interaction%20data,invisibly%20in%20our%20emails."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Cookies. Some of our automatic data collection is facilitated by cookies and similar technologies.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Cookies.%20Some%20of,cookies%20and%20similar%20technologies."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Events. We may use your personal information to administer events that we organize or sponsor.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Events.%20We%20may,we%20organize%20or%20sponsor."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Shared content: If you choose to share visuals or presentations using sharing links, the recipients of those links will be able to view the shared content.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Shared%20content%3A%20If,view%20the%20shared%20content."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Your profile information may be visible to other users when you collaborate or share content. We do not make your personal information publicly available without your explicit choice to share it.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Your%20profile%20information,choice%20to%20share%20it."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Opt-out of communications. You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us . Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your choices”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Opt-out%20of%20communications.,and%20other%20non-marketing%20emails."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your choices”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Declining%20to%20provide,to%20provide%20those%20services."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" For questions about this Privacy Policy or to exercise your privacy rights, please contact us using the information above.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data Protection Officer: Erwan Martin — [email protected]”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20For%20questions%20about,using%20the%20information%20above."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Transactional data , such as information relating to or needed to complete your orders on or through the Service, including payment details, order numbers and transaction history.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Transactional%20data%20%2C,numbers%20and%20transaction%20history."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Compliance and protection. We may use your personal information to:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Compliance%20and%20protection.,your%20personal%20information%20to%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Marketing data , such as your preferences for receiving our marketing communications and details about your engagement with them.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Marketing%20data%20%2C,your%20engagement%20with%20them."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" We may use your personal information for the following purposes or as otherwise described at the time of collection:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20We%20may%20use,the%20time%20of%20collection%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Public sources , such as government agencies, public records, social media platforms, and other publicly available sources.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Public%20sources%20%2C,other%20publicly%20available%20sources."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" U.S. state privacy rights. Depending on your state of residency, applicable laws may provide for certain privacy rights. To exercise, or appeal our decision regarding such rights, please contact us at [email protected] .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your choices”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20U.S.%20state%20privacy,us%20at%20%5Bemail%26%23160%3Bprotected%5D%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Access control: Access to user data is limited strictly to authorized personnel who need it for operational or support purposes. Internal access is managed using role-based permissions.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Security”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Access%20control%3A%20Access,managed%20using%20role-based%20permissions."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Profile data , such as your password.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Profile%20data%20%2C%20such%20as%20your%20password."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Access and control of your information. Various privacy laws provide you with certain rights regarding your personal information, those rights may include the right to:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Access%20and%20control,include%20the%20right%20to%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Security”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20We%20employ%20a,of%20your%20personal%20information."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Third-party%20sources.%20We,other%20sources%2C%20such%20as%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Communications data based on our exchanges with you, including when you contact us through the Service, social media, or otherwise.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Communications%20data%20based,social%20media%2C%20or%20otherwise."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Information%20you%20provide,Service%20or%20otherwise%20includes%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 7.1.2 Napkin AI provides Customers with a mechanism to opt out of all non-essential data use. Where the Customer exercises such opt-out (via Account Settings, Teamspace settings), Napkin AI shall process Customer Personal Data solely to deliver the Services and shall not use any Customer interaction data for any purpose beyond service delivery. Opt-out requests will be honoured within two (2) business days.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7.1.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.2%20Napkin%20AI,two%20(2)%20business%20days."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20communicate%20with%20you,support%20and%20administrative%20messages%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" provide support for the Service, and respond to your requests, questions and feedback.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20provide%20support%20for,requests%2C%20questions%20and%20feedback."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for the following marketing purposes:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Marketing.%20We%2C%20our,the%20following%20marketing%20purposes%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Service delivery and operations. We may use your personal information to:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Service%20delivery%20and,your%20personal%20information%20to%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Service improvement and analytics. We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Service%20improvement%20and,new%20products%20and%20services."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Privacy-by-design principles applied; personal data collection limited to what is necessary; regular data mapping and inventory reviews. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Data Minimization”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Privacy-by-design%20principles%20applied%3B,and%20inventory%20reviews.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" The Service is not intended for use by anyone under 13 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us using the details in the 'How to contact us' section. If we learn that we have collected personal information through the Service from a child without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Children”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20The%20Service%20is,to%20delete%20the%20information."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Encryption: All data is encrypted in transit using HTTPS/TLS protocols. Sensitive data stored on our servers is encrypted at rest.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Security”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Encryption%3A%20All%20data,is%20encrypted%20at%20rest."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" “Customer Personal Data” \n means any Personal Data that is submitted to, stored in, or processed through the Services by or on behalf of the Customer. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CCustomer%20Personal%20Data%E2%80%9D,of%20the%20Customer.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" “Personal Data” \n has the meaning given in Article 4(1) of the GDPR. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CPersonal%20Data%E2%80%9D%20has,of%20the%20GDPR.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" “Processing” \n has the meaning given in Article 4(2) of the GDPR, and “Process”, “Processes”, and “Processed” shall be construed accordingly. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CProcessing%E2%80%9D%20has%20the,be%20construed%20accordingly.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" “Services” \n means the Napkin AI visual communication and diagramming platform and any related professional services provided to the Customer under the Agreement. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CServices%E2%80%9D%20means%20the,under%20the%20Agreement.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" “UK Personal Data” \n means Personal Data subject to the UK GDPR. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CUK%20Personal%20Data%E2%80%9D,the%20UK%20GDPR.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 4.2 The Customer shall be solely responsible for the accuracy, quality, and lawfulness of Customer Personal Data provided to Napkin AI. The Customer shall not submit to the Services any special category personal data (as defined in Article 9 GDPR) or criminal conviction data without first notifying Napkin AI and agreeing in writing on the applicable legal basis and any additional safeguards required. Where the Customer submits personal data belonging to individuals under 18 years of age, the Customer represents and warrants that it has obtained all necessary consents, authorizations, and legal bases required under applicable law (including, where applicable, FERPA and COPPA) and shall be solely responsible for ensuring compliance with any additional safeguards required for the processing of minors’ data.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 4.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%204.2%20The%20Customer,processing%20of%20minors%E2%80%99%20data."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 6.1 Napkin AI shall notify the Customer without undue delay, and in any event within forty-eight (48) hours of becoming aware of a confirmed Personal Data Breach affecting Customer Personal Data.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.1%20Napkin%20AI,affecting%20Customer%20Personal%20Data."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 6.2 Such notification shall include, to the extent available at the time of notification: (a) a description of the nature of the Personal Data Breach, including the categories and approximate number of Data Subjects and records affected; (b) the name and contact details of Napkin AI’s Data Protection Officer ( [email protected] ); (c) the likely consequences of the breach; and (d) the measures taken or proposed to address the breach.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.2%20Such%20notification,to%20address%20the%20breach."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 8.1 To the extent that Napkin AI Processes Customer Personal Data that is subject to U.S. Privacy Laws, the following provisions apply.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.1%20To%20the,the%20following%20provisions%20apply."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Account data (name, email, job title, company); Content data (diagrams, visuals, documents created or uploaded by users); Usage data (feature interactions, session identifiers) – processed in identifiable form solely for service delivery; only de-identified and aggregated derivatives are used for product and model improvement in accordance with Section 7.1.3 of this DPA, and such de-identified data does not constitute Personal Data; Support data (correspondence, error reports). ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Categories of Personal Data”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Account%20data%20(name%2C,(correspondence%2C%20error%20reports).%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" https://openai.com/privacy ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “AI language model inference (GPT series)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fopenai.com%2Fprivacy%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" https://cloud.google.com/privacy ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Business intelligence and analytics”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fcloud.google.com%2Fprivacy%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" All data encrypted in transit using TLS 1.2 or higher; all data encrypted at rest using AES-256; encryption key management via Google Cloud KMS with automatic key rotation. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Encryption”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20All%20data%20encrypted,automatic%20key%20rotation.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Documented incident response plan tested annually; escalation paths to CTO and DPO; post-incident reviews for all severity-1 events. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Incident Response”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Documented%20incident%20response,all%20severity-1%20events.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Role-based access control (RBAC); principle of least privilege enforced; multi-factor authentication (MFA) required for all privileged access; quarterly access reviews; immediate revocation upon termination. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Access Control”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Role-based%20access%20control,revocation%20upon%20termination.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" “Data Subject” \n means the identified or identifiable natural person to whom Personal Data relates. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CData%20Subject%E2%80%9D%20means,Personal%20Data%20relates.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 3.2.1 Napkin AI shall implement and maintain appropriate technical and organizational measures to protect Customer Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of Processing, as further detailed in Annex 3.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.2.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.2.1%20Napkin%20AI,detailed%20in%20Annex%203."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Third-party services , such as Google login services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Third-party%20services%20%2C,settings%20on%20that%20service."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Collection, storage, retrieval, display, transmission, and deletion of Customer Personal Data as necessary to provide the Services. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Nature of Processing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Collection%2C%20storage%2C%20retrieval%2C,provide%20the%20Services.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Automated dependency scanning via Dependabot; vulnerability report program ( https://vdp.napkin.ai/ ); penetration testing at minimum annually; critical vulnerabilities remediated within 72 hours. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Vulnerability Management”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Automated%20dependency%20scanning,within%2072%20hours.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Processing of Customer Personal Data in connection with the provision of the Napkin AI visual communication and diagramming services. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Subject Matter”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Processing%20of%20Customer,and%20diagramming%20services.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" To provide, maintain, secure, and support the Services; to fulfill Customer instructions; and to comply with applicable legal obligations. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Purpose of Processing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20To%20provide%2C%20maintain%2C,applicable%20legal%20obligations.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" understand your needs and interests, and personalize your experience with the Service and our communications; and","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20understand%20your%20needs,and%20our%20communications%3B%20and"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Access your personal information and request a copy of the data we hold about you","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Access%20your%20personal,we%20hold%20about%20you"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Automatic%20data%20collection.,online%20services%2C%20such%20as%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Direct marketing. We may send you direct marketing communications, including our newsletter and product updates. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Direct%20marketing.%20We,of%20marketing%20section%20below."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Do Not Track. Some Internet browsers may be configured to send \"Do Not Track\" signals to the online services that you visit. We currently do not respond to \"Do Not Track\" or similar signals. To find out more about \"Do Not Track,\" please visit http://www.allaboutdnt.com .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your choices”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Do%20Not%20Track.,please%20visit%20http%3A%2F%2Fwww.allaboutdnt.com%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" https://www.intercom.com/legal/privacy ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Customer support and communication”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fwww.intercom.com%2Flegal%2Fprivacy%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Research%20and%20development.,and%20promote%20our%20business."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" 6.3 Where all required information is not available at the time of initial notification, Napkin AI shall provide such information in phases as it becomes available, without undue further delay.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.3%20Where%20all,without%20undue%20further%20delay."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Demographic data , such as your city, state, country of residence, postal code.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Demographic%20data%20%2C,of%20residence%2C%20postal%20code."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" personalize the service, including remembering the devices from which you have previously logged in and remembering your selections and preferences as you navigate the Service;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20personalize%20the%20service%2C,you%20navigate%20the%20Service%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Other users and the public. Depending on your account settings and the functionality you choose to use:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Other%20users%20and,you%20choose%20to%20use%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Access restrictions: Administrative access is protected by strong authentication, and access logs are regularly reviewed. Systems are monitored for suspicious activity and protected against known threats.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Security”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Access%20restrictions%3A%20Administrative,protected%20against%20known%20threats."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":"We currently do not respond to \"Do Not Track\" or similar signals. To find out more about \"Do Not Track,\" please visit http://www.allaboutdnt.com .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your choices”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=We%20currently%20do%20not,please%20visit%20http%3A%2F%2Fwww.allaboutdnt.com%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" Contact data , such as your first and last name, salutation, email address, professional title, and company name.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Contact%20data%20%2C,title%2C%20and%20company%20name."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" communicate with you about events or contests in which you participate;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20communicate%20with%20you,in%20which%20you%20participate%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" provide, operate and improve the Service and our business;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20provide%2C%20operate%20and,Service%20and%20our%20business%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" “Personal Data Breach” \n means a confirmed breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Customer Personal Data transmitted, stored, or otherwise processed by Napkin AI. For the avoidance of doubt, unsuccessful access attempts, port scans, pings, and denial-of-service attacks that do not result in unauthorized access do not constitute a Personal Data Breach. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CPersonal%20Data%20Breach%E2%80%9D,Personal%20Data%20Breach.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Online activity data , such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Online%20activity%20data,clicked%20links%20within%20them."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"low","description":" 4.3 The Customer shall implement appropriate technical and organizational measures to secure Customer’s own systems, credentials, and any software integrations used to access the Services.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 4.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%204.3%20The%20Customer,to%20access%20the%20Services."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"low","description":" enforce the terms and conditions that govern the Service, including our Acceptable Use Policy ;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20enforce%20the%20terms,Acceptable%20Use%20Policy%20%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"low","description":" Mailmodo Technologies, Inc. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Transactional email delivery”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Mailmodo%20Technologies%2C%20Inc.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"medium","description":" We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Changes to this Privacy Policy”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20We%20reserve%20the,Service%20and%20our%20business."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"low","description":" More specifically:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20More%20specifically%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"low","description":" The Customer, being the entity that has accepted the Napkin AI Terms of Service or executed an enterprise agreement. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Data Exporter (Controller)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20Customer%2C%20being,an%20enterprise%20agreement.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"low","description":" Customer employees, contractors, agents, and end-users who access the Services under Customer’s account. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Categories of Data Subjects”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Customer%20employees%2C%20contractors%2C,under%20Customer%E2%80%99s%20account.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" When we no longer require the personal information we have collected about you, we may either delete it, anonymize it, or isolate it from further processing.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20When%20we%20no,it%20from%20further%20processing."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"low","description":" 11.2 Return and Deletion. Upon expiry or termination of the Agreement, Napkin AI shall, at the Customer’s election: (a) return all Customer Personal Data in a structured, commonly used, machine-readable format; or (b) securely delete or destroy all Customer Personal Data. Such return or deletion shall be completed within seven (7) calendar days for data held in active production systems and within thirty (30) calendar days for data held in backup systems and operational logs, unless applicable law requires Napkin AI to retain such data for a longer period.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 11.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.2%20Return%20and,for%20a%20longer%20period."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"low","description":" 11.3 Napkin AI shall, upon the Customer’s written request, provide written certification that all Customer Personal Data has been deleted or returned in accordance with this Section 11.2.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 11.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.3%20Napkin%20AI,with%20this%20Section%2011.2."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"low","description":" 11.5 The following provisions shall survive termination of this DPA: Section 1 (Definitions), Section 9 (Customer Indemnity), Section 10 (Liability), Section 11.2 to 11.4 (Return and Deletion), and Section 12 (General Provisions).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 11.5"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.5%20The%20following,Section%2012%20(General%20Provisions)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"low","description":" For the term of the Agreement and until all Customer Personal Data has been deleted or returned in accordance with Section 11 of this DPA. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Duration”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20For%20the%20term,of%20this%20DPA.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"low","description":" Business Continuity Plan (BCP) reviewed annually; daily automated backups with 30-day retention; RTO: 24 hours; RPO: 24 hours. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Business Continuity”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Business%20Continuity%20Plan,RPO%3A%2024%20hours.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" Account-related data (such as email, preferences, visuals, input text) is kept as long as your account is active.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Account-related%20data%20(such,your%20account%20is%20active."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" 11.4 Where fulfilment of a data return or deletion request under Section 11.2 requires manual work exceeding two (2) person-hours, Napkin AI may charge the Customer its reasonable, documented costs at then-current professional services rates, except where such charges are prohibited by Applicable Data Protection Laws.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 11.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.4%20Where%20fulfilment,Applicable%20Data%20Protection%20Laws."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" Usage data and analytics may be retained in aggregate or anonymized form for product improvement and reporting.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Usage%20data%20and,product%20improvement%20and%20reporting."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" Support and communication records are stored to maintain service continuity and historical context.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Support%20and%20communication,continuity%20and%20historical%20context."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" We generally retain information for as long as necessary to provide the service, to fulfill the purposes outlined in this Privacy Policy, to comply with legal, accounting, contractual, or operational obligations, to establish or defend legal claims, or to prevent fraud. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20We%20generally%20retain,the%20applicable%20legal%20requirements."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"medium","description":" When you ask us to delete your account , most personal data is scheduled for deletion immediately from active systems and you will no longer appear in any user-facing parts of the Service. However, some data may be temporarily retained in secure backups for a limited period for operational, legal, or security reasons such as fraud prevention or dispute handling. These backups are automatically purged after our standard retention window, and the data is not actively used during that time. No personal data is kept longer than necessary, and we will not retain data beyond what is required by law or for legitimate business purposes.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20When%20you%20ask,for%20legitimate%20business%20purposes."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"medium","description":" The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be used, linked or integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Other sites and services”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20The%20Service%20may,online%20services%20you%20use."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"medium","description":" (c) any breach by the Customer of its representations, warranties, or obligations under this DPA or Applicable Data Protection Laws; or","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(c)%20any%20breach,Data%20Protection%20Laws%3B%20or"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"medium","description":" 10.2 Neither party shall be liable to the other for any indirect, incidental, special, exemplary, consequential, or punitive damages, including loss of profits, revenue, goodwill, or data, arising out of or in connection with this DPA, even if the party has been advised of the possibility of such damages, regardless of the theory of liability.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 10.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2010.2%20Neither%20party,the%20theory%20of%20liability."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"medium","description":" 9.1 The Customer shall defend, indemnify, and hold harmless Napkin AI and its parent company, affiliates, officers, directors, employees, agents, and successors (“Napkin AI Indemnified Parties”) from and against any third-party claims, investigations, regulatory proceedings, fines, losses, damages, liabilities, costs, and reasonable legal fees (“Losses”) arising out of or related to:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%209.1%20The%20Customer,of%20or%20related%20to%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"medium","description":" 6.4 Napkin AI’s notification of, or response to, a Personal Data Breach shall not constitute an acknowledgement of fault or liability by Napkin AI with respect to the incident.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%206.4%20Napkin%20AI%E2%80%99s,respect%20to%20the%20incident."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"low","description":" 9.2 Napkin AI shall: (a) promptly notify the Customer in writing upon becoming aware of any claim for which indemnification may be sought; (b) grant the Customer sole control of the defense and settlement of such claim (provided that the Customer may not settle any claim that imposes non-monetary obligations on, or admits fault on behalf of, any Napkin AI Indemnified Party without Napkin AI’s prior written consent); and (c) provide reasonable cooperation and assistance to the Customer in the defense of such claim, at the Customer’s expense.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%209.2%20Napkin%20AI,at%20the%20Customer%E2%80%99s%20expense."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"low","description":" 9.3 The indemnification obligations in this Section 9 are subject to the liability limitations set out in Section 10 and do not apply to the extent that any Losses arise from Napkin AI’s own negligence, willful misconduct, or breach of this DPA.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%209.3%20The%20indemnification,breach%20of%20this%20DPA."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"low","description":" 10.3 Nothing in this Section 10 shall limit either party’s liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be limited or excluded by applicable law.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 10.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2010.3%20Nothing%20in,excluded%20by%20applicable%20law."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"medium","description":" (a) the Customer’s failure to establish, maintain, or document a lawful basis for Processing Customer Personal Data under Applicable Data Protection Laws;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(a)%20the%20Customer%E2%80%99s,Applicable%20Data%20Protection%20Laws%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"low","description":" 10.4 The parties acknowledge that neither party shall be obligated to indemnify the other for any administrative fines, penalties, or sanctions imposed directly by a Supervisory Authority on either party in respect of that party’s own compliance failures.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 10.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2010.4%20The%20parties,party%E2%80%99s%20own%20compliance%20failures."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"medium","description":" (d) any claim by a Data Subject arising from the Customer’s acts or omissions in respect of that Data Subject’s Personal Data, where such claim is not attributable to Napkin AI’s failure to perform its obligations under this DPA.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(d)%20any%20claim,obligations%20under%20this%20DPA."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"medium","description":" 10.1 Each party’s total aggregate liability to the other party under or in connection with this DPA shall be subject to the liability limitations and caps set out in the Agreement. For the avoidance of doubt, the DPA is part of the Agreement for the purposes of any liability cap.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 10.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2010.1%20Each%20party%E2%80%99s,of%20any%20liability%20cap."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"low","description":" (b) the Customer’s instructions to Napkin AI that, if followed, would cause Napkin AI to violate Applicable Data Protection Laws;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(b)%20the%20Customer%E2%80%99s,Applicable%20Data%20Protection%20Laws%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"confidentiality","value":"low","description":" Confidentiality obligations in employment contracts; annual security awareness training. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Personnel Security”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Confidentiality%20obligations%20in,security%20awareness%20training.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"confidentiality","value":"low","description":" 3.1.1 Napkin AI shall ensure that all personnel authorized to Process Customer Personal Data are subject to appropriate confidentiality obligations, whether by contract or statutory duty, and that access is limited to those personnel who require it to perform the Services.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.1.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.1.1%20Napkin%20AI,to%20perform%20the%20Services."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" https://sentry.io/privacy ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Error monitoring and crash reporting”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fsentry.io%2Fprivacy%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Our affiliate partners , such as our affiliate network provider and publishers, influencers, and promoters who participate in our paid affiliate programs.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Our%20affiliate%20partners,our%20paid%20affiliate%20programs."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":"Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, such as:\n\n \n Google Cloud Platform (hosting and infrastructure)\n\n Intercom (customer support and communication)\n\n Sendgrid and Mailmodo (email delivery)\n\n Sentry (error and performance monitoring)\n\n Google Analytics (product analytics)\n\n OpenAI and Gemini (AI-powered generation and processing services)\n\n \n These service providers process personal data only on our instructions and under strict confidentiality agreements.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we share your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=Service%20providers.%20Third%20parties,under%20strict%20confidentiality%20agreements."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" 8.2 Service Provider Designation. For purposes of the CCPA/CPRA, Napkin AI is a “service provider” and “contractor” with respect to Customer Personal Data. Napkin AI shall not: (a) sell or share Customer Personal Data (as those terms are defined under CCPA/CPRA); (b) retain, use, or disclose Customer Personal Data for any purpose other than the business purposes specified in this DPA and the Agreement; or (c) combine Customer Personal Data received from the Customer with personal information received from other sources except as permitted by U.S. Privacy Laws.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.2%20Service%20Provider,by%20U.S.%20Privacy%20Laws."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Private sources , such as data providers and data licensors.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Personal information we collect”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Private%20sources%20%2C,providers%20and%20data%20licensors."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20comply%20with%20applicable,requests%20from%20government%20authorities%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Affiliates. Our corporate parent, subsidiaries, and affiliates.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we share your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Affiliates.%20Our%20corporate%20parent%2C%20subsidiaries%2C%20and%20affiliates."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20protect%20our%2C%20your,and%20defending%20legal%20claims)%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, such as:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we share your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Service%20providers.%20Third,our%20business%2C%20such%20as%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" We may share your personal information with the following parties and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we share your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20We%20may%20share,the%20time%20of%20collection."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so, such as when you share content with collaborators, or connect third-party services. We only share information that is needed for these other companies to provide the services that you have requested.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Third%20parties%20designated,that%20you%20have%20requested."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Professional%20advisors.%20Professional,they%20render%20to%20us."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" 3.3.3 Napkin AI shall impose on all Sub-Processors data protection obligations that are no less protective than those set out in this DPA by way of written contract. Napkin AI remains liable to the Customer for the performance of each Sub-Processor’s obligations to the extent Napkin AI performs such obligations itself.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.3.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.3.3%20Napkin%20AI,performs%20such%20obligations%20itself."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Twilio SendGrid, Inc. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Payment processing and billing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Twilio%20SendGrid%2C%20Inc.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" 7.1.4 Content submitted by users may be processed through third-party AI inference APIs as necessary to provide the Services, subject to the sub-processor agreements in Annex 2 and the zero-data-retention commitments in Section 7.2.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7.1.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.1.4%20Content%20submitted,commitments%20in%20Section%207.2."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" 3.3.2 The Customer may object to a new or replacement Sub-Processor on reasonable data protection grounds within the ten (10) day notice period by providing written notice to Napkin AI at [email protected] . The parties shall cooperate in good faith to resolve the objection. If the parties cannot resolve the objection within a reasonable timeframe, either party may terminate the affected Services upon written notice.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.3.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.3.2%20The%20Customer,Services%20upon%20written%20notice."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" “Sub-Processor” \n means any Processor engaged by Napkin AI to process Customer Personal Data on behalf of the Customer. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CSub-Processor%E2%80%9D%20means%20any,of%20the%20Customer.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" https://www.twilio.com/legal/privacy ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Transactional email delivery”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fwww.twilio.com%2Flegal%2Fprivacy%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" 5.5 Government Agency Requests. As of the Effective Date of this DPA, Napkin AI (and Second Layer, Inc.) has not received any formal legal requests from any government intelligence or security agency for access to Customer Personal Data. If Napkin AI receives any such request after the Effective Date, Napkin AI shall: (a) to the extent permitted by applicable law, promptly notify the Customer; (b) use commercially reasonable efforts to redirect the relevant law enforcement or government agency to request that data directly from the Customer; and (c) provide the Customer with reasonable notice of any such demand unless legally prohibited from doing so by a court of competent jurisdiction or applicable law.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.5"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.5%20Government%20Agency,jurisdiction%20or%20applicable%20law."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" 7.2.1 Napkin AI currently uses Google Cloud AI (Vertex AI) and OpenAI, L.L.C., as AI inference sub-processors. These providers process Customer prompts and content in the ordinary course of delivering AI-powered features.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7.2.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.2.1%20Napkin%20AI,of%20delivering%20AI-powered%20features."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Stripe, Inc. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Customer support and communication”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Stripe%2C%20Inc.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Collaborative content: When you collaborate with other users, they will have access to the content you choose to share with them.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Collaborative%20content%3A%20When,to%20share%20with%20them."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Note: Organizations with separate data processing agreements may have different data sharing arrangements as specified in their agreements.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Note%3A%20Organizations%20with,specified%20in%20their%20agreements."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" 3.3.1 The Customer grants Napkin AI general written authorization to engage the Sub-Processors listed in Annex 2 and at https://www.napkin.ai/sub-processors . Napkin AI shall provide at least ten (10) calendar days' prior notice of any intended addition or replacement of a Sub-Processor by updating the Sub-Processor page at https://www.napkin.ai/sub-processors and, where the Customer has subscribed to notifications, by email to the Customer's registered account address. The Customer may subscribe to Sub-Processor change notifications at https://www.napkin.ai/sub-processors .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.3.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.3.1%20The%20Customer,notifications%20at%20https%3A%2F%2Fwww.napkin.ai%2Fsub-processors%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" The following Sub-Processors are authorized by the Customer pursuant to Section 3.3.1 of this DPA. This list reflects the Sub-Processors engaged as of the Effective Date. The most current list is also referenced in the Napkin AI Privacy Policy at https://www.napkin.ai/privacy-policy/ .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"ANNEX 2 (– AUTHORIZED SUB-PROCESSORS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20following%20Sub-Processors,Policy%20at%20https%3A%2F%2Fwww.napkin.ai%2Fprivacy-policy%2F%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" Linked third-party platforms. If you choose to connect to the Service through your social media account or other third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your choices”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Linked%20third-party%20platforms.,from%20that%20third%20party."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" These service providers process personal data only on our instructions and under strict confidentiality agreements.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20These%20service%20providers,under%20strict%20confidentiality%20agreements."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Authorities%20and%20others.,protection%20purposes%20described%20above."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"medium","description":" Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in Napkin, financing of Napkin, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares), for example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Napkin as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Business%20transferees.%20We,of%20our%20business%20assets."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" NOTE RE: AI SUB-PROCESSORS – ZERO DATA RETENTION: Napkin AI maintains zero-data-retention (ZDR) agreements with all AI inference sub-processors (currently Google Cloud AI and OpenAI). Customer Personal Data submitted to these providers is not retained beyond the immediate processing request and is not used for model training by those providers.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Error monitoring and crash reporting”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20NOTE%20RE%3A%20AI,training%20by%20those%20providers."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" Payment processors. Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy, https://stripe.com/privacy .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “OpenAI and Gemini (AI-powered generation and processing services)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Payment%20processors.%20Any,privacy%20policy%2C%20https%3A%2F%2Fstripe.com%2Fprivacy%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"low","description":" https://stripe.com/privacy ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Payment processing and billing”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20https%3A%2F%2Fstripe.com%2Fprivacy%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" (c) Clause 17 (governing law) – the laws of France shall govern the EU SCCs; and","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(c)%20Clause%2017,the%20EU%20SCCs%3B%20and"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 3.6.1 Napkin AI shall make available to the Customer all information reasonably necessary to demonstrate compliance with this DPA and shall allow for and contribute to audits and inspections conducted by the Customer or a qualified third-party auditor appointed by the Customer. The Customer shall provide at least thirty (30) days’ prior written notice of any audit request; audits shall be conducted during normal business hours, no more than once per calendar year, absent a confirmed Personal Data Breach, and the Customer shall bear all costs of such audit.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.6.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.6.1%20Napkin%20AI,costs%20of%20such%20audit."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" DATA CONTROLLER: The entity or individual (“Customer”) that accepts the Napkin AI Terms of Service or executes an enterprise agreement with Napkin AI.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Data Processing Agreement - Napkin AI”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20DATA%20CONTROLLER%3A%20The,agreement%20with%20Napkin%20AI."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" audit our internal processes for compliance with legal and contractual requirements or our internal policies;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “How we use your personal information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20audit%20our%20internal,or%20our%20internal%20policies%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" Note: If you are part of an organization that has a separate data processing agreement with us, please also refer to that agreement for any additional rights or procedures that may apply","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Withdraw consent where it was previously given”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Note%3A%20If%20you,procedures%20that%20may%20apply"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" All sub-processors subject to data processing agreements with equivalent obligations; sub-processor list maintained per Annex 2; annual security reviews of critical sub-processors. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Sub-Processor Management”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20All%20sub-processors%20subject,of%20critical%20sub-processors.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “Controller” \n has the meaning given in Article 4(7) of the GDPR. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CController%E2%80%9D%20has%20the,of%20the%20GDPR.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" (b) Option 2 of Clause 9 (general written authorization) is selected, with a ten (10) calendar day notice period;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(b)%20Option%202,calendar%20day%20notice%20period%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 5.4 Mechanism Invalidity. If any transfer mechanism relied upon under this Section 5 becomes invalid, suspended, or otherwise unavailable, the parties shall cooperate in good faith to implement a lawful alternative transfer mechanism without undue delay. Napkin AI may suspend the relevant transfers until such mechanism is in place, without such suspension constituting a breach of this DPA or the Agreement.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.4%20Mechanism%20Invalidity.,DPA%20or%20the%20Agreement."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" This Data Processing Agreement (“DPA”) forms part of the Napkin AI Terms of Service available at https://www.napkin.ai/terms-conditions/ (the “Agreement”) and sets out the terms on which Napkin AI processes Customer Personal Data on behalf of the Customer. This DPA is effective as of the date Customer creates an account, accepts the Terms of Service, or first accesses the Services, whichever occurs first.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “PREAMBLE”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20This%20Data%20Processing,Services%2C%20whichever%20occurs%20first."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “Applicable Data Protection Laws” \n means, collectively, all laws and regulations applicable to the processing of personal data under this DPA, including, without limitation, the GDPR, the UK GDPR, the CCPA/CPRA, and all other applicable national, federal, or state privacy and data protection statutes in force during the term. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CApplicable%20Data%20Protection,during%20the%20term.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “DPA” \n means this Data Processing Agreement, including all Annexes. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CDPA%E2%80%9D%20means%20this,including%20all%20Annexes.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “Processor” \n has the meaning given in Article 4(8) of the GDPR. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CProcessor%E2%80%9D%20has%20the,of%20the%20GDPR.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “UK GDPR” \n means the GDPR as retained in UK law by the European Union (Withdrawal) Act 2018 and as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CUK%20GDPR%E2%80%9D%20means,Exit)%20Regulations%202019.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 2.1 Napkin AI shall Process Customer Personal Data only on the Customer’s documented instructions as set out in this DPA, in Annex 1, and as further specified in the Agreement, except where required to do so by applicable law, in which case Napkin AI shall, to the extent permitted by law, inform the Customer of that legal requirement before Processing.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 2.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%202.1%20Napkin%20AI,legal%20requirement%20before%20Processing."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “U.S. Privacy Laws” \n means the collective privacy, data protection, and data security laws and regulations issued by governmental authorities of any US state jurisdiction applicable to the Processing of Customer Personal Data under this DPA, including the CCPA/CPRA. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CU.S.%20Privacy%20Laws%E2%80%9D,including%20the%20CCPA%2FCPRA.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 2.4 This DPA shall remain in effect for the duration of the Agreement and shall terminate automatically upon expiry or termination of the Agreement, subject to the survival provisions set out in Section 11.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 2.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%202.4%20This%20DPA,out%20in%20Section%2011."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 3.4.1 Napkin AI shall, taking into account the nature of the Processing, promptly assist the Customer by appropriate technical and organizational measures to fulfil the Customer’s obligations to respond to Data Subject requests under Applicable Data Protection Laws, including requests for access, rectification, erasure, restriction, portability, and objection.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.4.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.4.1%20Napkin%20AI,restriction%2C%20portability%2C%20and%20objection."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 5.1 EU Standard Contractual Clauses. To the extent that Napkin AI Processes Customer Personal Data originating from the European Economic Area (“EEA”) and transfers such data to the United States or any other country that has not been the subject of an adequacy decision by the European Commission, the parties agree that such transfers are made pursuant to the EU SCCs, which are incorporated into this DPA by reference, and completed as follows:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.1%20EU%20Standard,and%20completed%20as%20follows%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" The information required by Annex I, II, and III of the EU SCCs is set out in Annexes 1, 2, and 3 of this DPA, respectively.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20information%20required,of%20this%20DPA%2C%20respectively."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 12.7 Acceptance. By creating a Napkin AI account, accepting the Terms of Service, or using the Services, the Customer acknowledges that it has read, understood, and agrees to be bound by this DPA. For enterprise customers with separately executed agreements, this DPA may also be executed in counterparts, including by electronic signature via DocuSign or equivalent platform.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12.7"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.7%20Acceptance.%20By,DocuSign%20or%20equivalent%20platform."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 7.3.1 Napkin AI’s Services do not, as of the Effective Date, deploy AI systems classified as high-risk under Regulation (EU) 2024/1689 (the “EU AI Act”). Napkin AI shall notify the Customer if this position changes and shall work with the Customer to address any resulting compliance obligations.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7.3.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%207.3.1%20Napkin%20AI%E2%80%99s,any%20resulting%20compliance%20obligations."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 8.5 Certification. Napkin AI certifies that it understands and will comply with its obligations as a service provider and contractor under the CCPA/CPRA, including the restrictions on use and disclosure of Customer Personal Data set forth in this Section 8.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8.5"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.5%20Certification.%20Napkin,in%20this%20Section%208."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 11.1 This DPA shall come into effect on the Effective Date and shall remain in force for the duration of the Agreement. This DPA shall terminate automatically upon the expiry or termination of the Agreement.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 11.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2011.1%20This%20DPA,termination%20of%20the%20Agreement."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 12.6 Notices. All notices under this DPA shall be in writing. Notices to Napkin AI shall be sent to: Data Protection Officer, Napkin AI (Second Layer, Inc.), 626 Jay Street, Los Altos, CA 94022, [email protected] . Notices to Customer shall be sent to the email address associated with the Customer’s account.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12.6"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.6%20Notices.%20All,with%20the%20Customer%E2%80%99s%20account."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 12.3 Amendments. Napkin AI may update this DPA from time to time. For changes required by applicable law or that expand privacy protections for Customers, updates take effect immediately upon publication at https://www.napkin.ai/data-processing-agreement/ . For material changes; defined as changes that (a) add new categories of personal data processed, (b) add new purposes of processing, or (c) materially reduce Customer rights under this DPA, Napkin AI will provide at least thirty (30) days' notice by updating the DPA page at https://www.napkin.ai/data-processing-agreement/ with a summary of the changes and the date they take effect. Enterprise customers with separately executed DPAs will receive direct email notice of material changes. Continued use of the Services after the effective date of any update constitutes acceptance. Sub-processor changes are governed exclusively by Section 3.3.1 and are not subject to this Section 12.3.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.3%20Amendments.%20Napkin,to%20this%20Section%2012.3."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"medium","description":" United States (primary). Sub-processor locations are listed in Annex 2. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Processing Locations”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20United%20States%20(primary).,in%20Annex%202.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" All production infrastructure hosted on GCP; physical security managed by respective cloud providers per ISO 27001 and SOC 2 Type II standards. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Physical Security”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20All%20production%20infrastructure,Type%20II%20standards.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" Napkin provides an AI-powered platform that generates visual materials including but not limited to business visuals, infographics, data charts, etc. This Privacy Policy applies to individual users and Team plan customers, except where organizations may have separate data processing agreements with us.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Privacy Policy - Napkin AI”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=%20Napkin%20provides%20an,processing%20agreements%20with%20us."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" The parties acknowledge that: (a) the Customer acts as a Controller with respect to Customer Personal Data; (b) Napkin AI acts as a Processor with respect to Customer Personal Data; (c) this DPA does not establish a joint controllership arrangement under Article 26 of the GDPR; and (d) each party remains solely responsible for its own compliance obligations.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “PREAMBLE”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20parties%20acknowledge,its%20own%20compliance%20obligations."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “Supervisory Authority” \n means the competent data protection supervisory authority having jurisdiction over the relevant party under Applicable Data Protection Laws. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CSupervisory%20Authority%E2%80%9D%20means,Data%20Protection%20Laws.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" DATA PROCESSOR: Second Layer, Inc. dba Napkin AI, a Delaware corporation, with registered address at 626 Jay Street, Los Altos, CA 94022, USA.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Data Processing Agreement - Napkin AI”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20DATA%20PROCESSOR%3A%20Second,Altos%2C%20CA%2094022%2C%20USA."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 3.4.2 If Napkin AI receives a request from a Data Subject in respect of Customer Personal Data, Napkin AI shall promptly forward that request to the Customer and shall not respond to such requests directly except as directed in writing by the Customer or as required by law.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.4.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.4.2%20If%20Napkin,as%20required%20by%20law."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 5.2 UK Transfers. To the extent that Napkin AI Processes UK Personal Data and transfers such data outside the United Kingdom, the parties agree that such transfers are governed by the UK IDTA. The UK IDTA is hereby incorporated into this DPA by reference, with: (a) Table 1 completed by reference to the party and transfer details set out in Annex 1; (b) Table 2 selecting the EU SCCs (Module Two, Controller to Processor) as completed in Section 5.1 of this DPA as the Linked Agreement; (c) Table 3 completed by reference to Annexes 1, 2, and 3 of this DPA; and (d) Table 4 selecting that either party may end the UK Addendum in accordance with Section 19 of the UK IDTA. By accepting this DPA, the Customer is deemed to have executed the UK Addendum. The EU SCCs form the Linked Agreement for the purposes of the UK Addendum.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.2%20UK%20Transfers.,of%20the%20UK%20Addendum."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “GDPR” \n means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CGDPR%E2%80%9D%20means%20Regulation,of%20personal%20data.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" (a) Module Two (Controller to Processor) of the EU SCCs applies where the Customer is a Controller and Napkin AI is a Processor;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(a)%20Module%20Two,AI%20is%20a%20Processor%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 3.2.2 Napkin AI may update or modify the technical and organizational measures from time to time provided the updated measures afford at least equivalent protection.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.2.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.2.2%20Napkin%20AI,at%20least%20equivalent%20protection."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" The following technical and organizational measures are implemented by Napkin AI (Second Layer, Inc.) in accordance with Article 32 of the GDPR and Annex II of the EU SCCs.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"ANNEX 3 (– TECHNICAL AND ORGANIZATIONAL MEASURES)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20following%20technical,of%20the%20EU%20SCCs."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"medium","description":" 3.6.2 Napkin AI may satisfy the audit obligations under this Section 3.6 by providing the Customer with a current SOC 2 Type II report or equivalent third-party audit report, subject to the Customer’s written agreement to maintain such report as confidential.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.6.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.6.2%20Napkin%20AI,such%20report%20as%20confidential."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"medium","description":"We are based in the United States and our data is currently hosted on secure cloud infrastructure based in the United States. This means that if you use the Service, your personal information will be transferred to and processed in the United States.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “International data transfers”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=We%20are%20based%20in,in%20the%20United%20States."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" The following table sets out the details of Processing activities required by Article 28(3) of the GDPR and Clause 1 of the EU SCCs.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"ANNEX 1 (– DETAILS OF PROCESSING ACTIVITIES)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20The%20following%20table,of%20the%20EU%20SCCs."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 4.1 The Customer represents and warrants that: (a) it has a valid lawful basis under Applicable Data Protection Laws for Processing each category of Customer Personal Data; (b) it has provided all required privacy notices to Data Subjects and obtained all required consents; and (c) it has the authority to provide Customer Personal Data to Napkin AI for Processing under this DPA.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 4.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%204.1%20The%20Customer,Processing%20under%20this%20DPA."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 8.3 Consumer Requests. Napkin AI shall, upon the Customer’s written request, assist the Customer in fulfilling its obligations to respond to verifiable consumer requests under U.S. Privacy Laws, including requests for access, deletion, correction, and opt-out of sale or sharing, within the timelines required by applicable law.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%208.3%20Consumer%20Requests.,required%20by%20applicable%20law."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “UK IDTA” \n means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses issued by the UK Information Commissioner’s Office (ICO) Version B1.0, in force 21 March 2022, as may be updated from time to time. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CUK%20IDTA%E2%80%9D%20means,time%20to%20time.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 2.2 The details of the Processing activities, including the subject matter, nature, purpose, categories of Personal Data, and categories of Data Subjects, are set out in Annex 1 to this DPA.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 2.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%202.2%20The%20details,1%20to%20this%20DPA."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 5.3 Transfer Impact Assessment. The Customer acknowledges that Napkin AI, as the data importer, has implemented the technical and organizational measures described in Annex 3 as supplementary measures to address any residual risks identified in connection with the transfer of Customer Personal Data to the United States.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%205.3%20Transfer%20Impact,to%20the%20United%20States."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"medium","description":"We may use service providers that operate in various countries, and your personal information may be transferred to locations where privacy laws may differ from those in your jurisdiction.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8a89bc852094b1b96c683b2071b02ffc2007216aceef403ae686b911067bf1eb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “International data transfers”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/privacy#:~:text=We%20may%20use%20service,those%20in%20your%20jurisdiction."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-07T02:14:51.679646+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"medium","description":" ISO 27001 certification work in progress, SOC 2 Type II audit planned for Q3 2026; GCP and other sub-processors maintain ISO 27001 and SOC 2 Type II certifications. Reports available upon written request. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Certifications”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20ISO%2027001%20certification,upon%20written%20request.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 2.3 Napkin AI shall promptly inform the Customer if, in Napkin AI’s opinion, any instruction from the Customer infringes Applicable Data Protection Laws, provided that Napkin AI shall have no obligation to conduct legal analysis on behalf of the Customer.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 2.3"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%202.3%20Napkin%20AI,behalf%20of%20the%20Customer."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 3.5.1 Napkin AI shall reasonably assist the Customer in ensuring compliance with the Customer’s security obligations under Article 32, breach notification obligations under Articles 33 and 34, data protection impact assessment obligations under Article 35, and prior consultation obligations under Article 36 of the GDPR, taking into account the nature of the Processing and the information available to Napkin AI. Napkin AI may charge reasonable, documented fees for compliance assistance that exceed Napkin AI’s ordinary course of business.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.5.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%203.5.1%20Napkin%20AI,ordinary%20course%20of%20business."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" “EU SCCs” \n means the standard contractual clauses for the transfer of Personal Data to third countries approved by the European Commission under Decision 2021/914 of 4 June 2021, as may be amended or replaced from time to time. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CEU%20SCCs%E2%80%9D%20means,time%20to%20time.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" 4.4 The Customer shall promptly notify Napkin AI of any changes to its instructions that may affect the lawfulness of Processing and shall cooperate with Napkin AI in implementing any required changes.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 4.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%204.4%20The%20Customer,implementing%20any%20required%20changes."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" 12.4 Severability. If any provision of this DPA is held invalid, unlawful, or unenforceable, the remaining provisions shall continue in full force and effect. The parties shall, in good faith, negotiate a replacement provision that is valid, lawful, and enforceable and that achieves, to the greatest extent possible, the original intention of the replaced provision.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12.4"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.4%20Severability.%20If,of%20the%20replaced%20provision."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" (d) Clause 18 (choice of forum) – the courts of France shall have jurisdiction.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20(d)%20Clause%2018,France%20shall%20have%20jurisdiction."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" 12.5 Governing Law. This DPA shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of laws provisions. The EU SCCs shall be governed by the laws of France, as set out in Section 5.1.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12.5"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.5%20Governing%20Law.,out%20in%20Section%205.1."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" In the event of any conflict between this DPA and the Agreement, the provisions of this DPA shall prevail with respect to the subject matter hereof.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “PREAMBLE”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20In%20the%20event,the%20subject%20matter%20hereof."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" “Effective Date” \n means the date on which the Customer first accepts the Napkin AI Terms of Service, creates an account, or accesses the Services, whichever occurs first. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CEffective%20Date%E2%80%9D%20means,whichever%20occurs%20first.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" 12.1 Order of Precedence. In the event of any inconsistency between this DPA and the Agreement with respect to data protection matters, this DPA shall prevail. In the event of any inconsistency between this DPA and the EU SCCs, the EU SCCs shall prevail.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12.1"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.1%20Order%20of,EU%20SCCs%20shall%20prevail."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" 12.2 Entire Agreement. This DPA, together with the Agreement and the Annexes hereto, constitutes the entire agreement between the parties with respect to the processing of Customer Personal Data and supersedes all prior or contemporaneous agreements, representations, and understandings relating to the same subject matter.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%2012.2%20Entire%20Agreement.,the%20same%20subject%20matter."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" Second Layer, Inc. dba Napkin AI, a Delaware corporation, with registered address at 626 Jay Street, Los Altos, CA 94022, USA. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Data Importer (Processor)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Second%20Layer%2C%20Inc.,CA%2094022%2C%20USA.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" OpenAI, L.L.C. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Privacy Policy”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20OpenAI%2C%20L.L.C.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" Sentry (Functional Software, Inc.) ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Business intelligence and analytics”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20Sentry%20(Functional%20Software%2C%20Inc.)%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"low","description":" “Agreement” \n means the Napkin AI Terms of Service available at https://www.napkin.ai/terms-conditions/ , as accepted by the Customer upon account creation or use of the Services, together with any applicable enterprise agreement, Order Form, or addenda executed between the parties. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"086fcf50c4e8bbdb528200824ad5241574a9d815a84c69441b91c52969f6f10e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://www.napkin.ai/data-processing-agreement"},{"@type":"PropertyValue","name":"structural_citation","value":"SECTION 1 (– DEFINITIONS)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://www.napkin.ai/data-processing-agreement#:~:text=%20%E2%80%9CAgreement%E2%80%9D%20means%20the,between%20the%20parties.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-06-10T04:00:51.573997+00:00"}]}]}}