blatent

Oblivious Services Agreement

This Services agreement (“agreement”) is entered into between the Customer and Oblivious Software Limited, a company incorporated in Ireland (registered number 669274) with its registered address at Saint James’s Court, 6 James’ Terrace. Malahide, Co Dublin K36Y972 (“Oblivious”) for the use of Oblivious’ Software (defined below).

Customer agrees that any terms and conditions contained in any purchase order issued by Customer to Oblivious do not apply to this Agreement.

General Terms

1. Definitions

“Business Day” means a day other than a Saturday, Sunday or a public holiday in Ireland when banks in Ireland are open for business;

“Claim” means any claim, demand, suit, cause of action, proceeding and/or investigation arising from or relating to this agreement;

“Confidential Information” means all information, regardless of the form of disclosure or the medium used to store it, that the Recipient, or its Representatives, directly or indirectly, becomes aware either through disclosure by the Discloser or its Representatives or otherwise through involvement with the Discloser, including:

  1. 1) all data, information, know-how, trade secrets, documents, software or materials relating to the Discloser, its business, pricing, operational methods, financial information, sales information, marketing information, contracts, staff, customers, suppliers, or the processes, methods, assets and intellectual property the Discloser uses;
  2. 2) any other information the Discloser designates as confidential or that the Recipient should reasonably know is confidential (whether or not that information is designated as confidential) or that has commercial value in relation to the Discloser’s business;
  3. 3) the existence and terms of this agreement and any related negotiations or discussions of the parties; and
  4. 4) all copies, analyses, compilations, notes, reports, and other permanent records prepared by or on behalf of the Recipient or its Representatives that contain or are derived from any of the information referred to in paragraphs (A), (B) and (C);

“Data Protection Law” means all laws, statutes, declarations, decrees, directives, legislative enactments, orders, ordinances, regulations, rules or other binding instruments in the European Union, the European Economic Area and Ireland, applicable to the Processing of Personal Data, including the General Data Protection Regulation 2016/679 (the “GDPR”);

“Discloser” means the party providing access to or giving Confidential Information to the other party;

“Input” means the prompts, data, instructions and other content Customer submits to the Software.

“Output” means the content generated by the Software in response to Input.

“Insolvency Event” means if a party summons a meeting of its creditors, makes a proposal for a voluntary arrangement, becomes subject to any voluntary arrangement, is unable to pay its debts within the meaning of section 570 of the Companies Act 2014, has a receiver, manager, administrative receiver or examiner appointed over any of its assets, undertakings or incomes, has passed a resolution for its winding-up (except for the purpose of a voluntary reconstruction or amalgamation previously approved in writing, by the other party), is subject to a petition presented to any court for its winding-up (except for the purpose of a voluntary reconstruction or amalgamation previously approved in writing, by the other party), has a provisional liquidator appointed or has any other analogous insolvency proceedings initiated against it whether in Ireland or any other jurisdiction;

“Intellectual Property Rights” means all intellectual property rights and related rights, including:

  1. 1) inventions, patents, copyright (including software and source code), circuit layouts, designs, database rights, trade and service marks (including goodwill in those marks), business methods, rights in get-up and trade dress, goodwill and the right to sue for passing off, moral rights, domain names and trade names, and the right to keep confidential information (including trade secrets and know how) confidential;
  2. 5) any application or right to apply for registration of any of the rights referred to in paragraph (A); and
  3. 6) all rights of a similar nature to any of the rights in paragraphs (A) and (B) that may exist anywhere in the world,

whether or not such rights are registered or capable of being registered;

“Normal Business Hours” means 9.00 am to 5.00 pm local Irish time, each Business Day;

“Recipient” means the party accessing or receiving Confidential Information from the other party;

“Representatives” means the directors, officers, employees, professional advisers and agents of a party;

“Software” means Struct, Blatent's model, and the API through which it is made available, including but not limited to any related models, tools, interfaces and documentation we make available to Customer under the early access programme.

“Term” has the meaning given in clause 11.1.

2. Early Access

2.1 Access to the Software is provided as part of Blatent's early access programme. The Software is pre-release, is provided free of charge, and may be modified, suspended or withdrawn at any time.

2.2 Subject to this agreement, we grant Customer a non-exclusive, non-transferable, revocable right to access and use the Software during the Term for Customer's internal business operations, without the right to grant sub-licences.

2.3 Use of the Software may be subject to rate limits, which we may set and change during the early access programme.

2.4 The Customer acknowledges that the Software is designed and intended only for business (enterprise) users, and confirms to Oblivious that the Customer is a business and not a consumer, and will not permit any of its employees, agents or contractors to use the Software for any consumer purpose, or private or domestic use, or any other purpose outside of the Customer’s business purposes.

3. Acceptable Use

3.1 Customer will use the Software in a manner compatible with applicable laws and regulations. We may disable access to any material that breaches this clause, without liability and without prejudice to our other rights.

3.2 Customer shall not:

3.2.1 copy, modify, duplicate, create derivative works from, frame, mirror, republish, transmit or distribute the Software, except as expressly permitted;

3.2.2 decompile, reverse engineer, disassemble or otherwise attempt to discover the source code, model weights, training data or underlying components of the Software, except to the extent this restriction cannot be excluded by law;

3.2.3 use the Software, or Output, to build or train a product or model that competes with the Software;

3.2.4 programmatically extract Output other than through the Software as permitted;

3.2.5 circumvent rate limits, safety measures or moderation mechanisms, or perform vulnerability, penetration or similar testing without our prior written consent;

3.2.6 represent Output as human-generated where doing so would mislead;

3.2.7 use the Services to provide services to third parties, or license, sell, rent, lease, transfer, assign, distribute or otherwise make the Services or Software available to any third party other than its own employees or authorised users;

3.2.8 submit, store or transmit material that is unlawful, harmful, threatening, defamatory, obscene, infringing, harassing, or racially or ethnically offensive, that facilitates illegal activity, that promotes unlawful violence, or that is discriminatory on the basis of race, gender, colour, religious belief, sexual orientation or disability; or

3.2.9 introduce any virus or malicious code into our systems.

3.3 Customer will ensure that anyone accessing the Software through its account complies with this clause, will take reasonable steps to prevent unauthorised access, and will notify us promptly if unauthorised access occurs.

4. Customer’s Obligations

4.1 Customer will:

4.1.1 provide reasonable co-operation and any information we reasonably need in order to provide the Services;

4.1.2 comply with all applicable laws and regulations in its use of the Services;

4.1.3 obtain and maintain all licences, consents and permissions necessary for us to perform our obligations, including in respect of Input;

4.1.4 be responsible for its own network connections and for any loss or delay arising from them or from the internet; and

4.1.5 keep its account credentials secure and confidential.

5. Input, Output, and How We Use Them

5.1 Ownership. As between the parties, Customer retains all rights in its Input, and we assign to Customer all rights we have in the Output generated for Customer.

5.2 Responsibility. Customer is responsible for its Input and for its use of Output, and represents that it has all rights and permissions needed to submit its Input.

5.3 Our licence. Customer grants us a licence to access and process Input and Output solely to provide and support the Services, including debugging, incident investigation and service monitoring, and to comply with our legal obligations.

5.4 No training. We will not use Customer's Input or Output to train, fine-tune or evaluate our models

5.5 Accuracy. The Software uses machine learning and its Output may be inaccurate, incomplete or unsuitable for Customer's purposes. Customer is responsible for evaluating Output before relying on it, and must not use Output relating to a person as the sole basis for decisions with legal or material effects on that person, including credit, employment, housing, insurance, legal or medical decisions.

5.6 Feedback. Customer may give us feedback about the Software. We may use that feedback without restriction or compensation to Customer.

6. Our Obligations and Warranties

6.1 We will perform the Services in accordance with this agreement and with reasonable skill and care.

6.2 We do not warrant that use of the Software will be uninterrupted or error-free, that the Software will meet Customer's requirements, or that Output will be accurate.

6.3 We may change the Software and the Services at any time, including by replacing or removing functionality, to improve performance, security or compliance, to address bugs, or where required by law. Where a change is reasonably likely to have a material adverse effect on Customer's use of the Software, we will make reasonable efforts to give thirty (30) days' notice, except where the change is needed to address a security vulnerability, to maintain availability or integrity, or to comply with law, or as part of the early access programme in which case we will notify as soon as reasonably practicable.

6.4 We are not responsible for delays, or any other loss resulting from the transfer of data over communications networks, including the internet.

6.5 This agreement does not prevent us from entering into similar agreements with third parties, or from developing, using, selling or licensing products or services similar to those provided under this agreement.

6.6 The warranties in this clause 6 are the only representations and warranties we make. To the maximum extent permitted by law, we exclude all other representations, warranties, conditions and terms, whether express, implied, statutory or otherwise, including as to quality, performance, suitability, accuracy, fitness for purpose, title or non-infringement.

7. Proprietary Rights

7.1 The Customer acknowledges and agrees that Oblivious and/or its licensors own all Intellectual Property Rights in the Services and the Software. Except as expressly stated herein, this agreement does not grant the Customer any rights to, under or in, any patents, copyright, database right, trade secrets, trade names, trademarks (whether registered or unregistered), or any other rights or licences in respect of the Services or the Software or in respect of any third party’s Intellectual Property Rights.

7.2 The Customer hereby grants to Oblivious a licence to access and process Customer Data solely for the purposes of Oblivious providing the Services, and for debugging, incident investigation, and service monitoring.

7.3 The Customer acknowledges that the Services may enable, assist or require it to access the website, platforms, tools, content of, correspond with, and purchase products and services from, third parties via third-party websites or otherwise and that it does so solely at its own risk. Oblivious makes no representation, warranty or commitment and shall have no liability or obligation whatsoever in relation to the content or use of, or correspondence with, any such third-party website, platform or tool or any transactions completed, and any contract entered into by the Customer, with any such third party. Any contract entered into and any transaction completed via any third-party website or otherwise is between the Customer and the relevant third party, and not Oblivious.

8. Confidentiality

8.1 The Recipient must keep secret and confidential, and not use or disclose any, Confidential Information of the Discloser unless this agreement otherwise permits. The Recipient must take all steps and do all such things as may be necessary, prudent or desirable in order to secure and protect the confidentiality of the Confidential Information of the Discloser and to prevent any unauthorised access to it.

8.2 The Recipient must use the Confidential Information of the Discloser only for the performance of its obligations under this agreement and for no other purpose.

8.3 The Recipient may disclose Confidential Information of the Discloser to its Representatives:

8.3.1 that need to know for the purposes of this agreement (and only to the extent that each has a need to know);

8.3.2 in the case of the Recipient's officers and employees, who have been directed in writing by the Recipient and have agreed to keep confidential all Confidential Information of the Discloser; and

8.3.3 in the case of other persons, who have agreed in writing with the Recipient to comply with equivalent obligations in respect of Confidential Information of the Discloser as those imposed on the Recipient under this agreement.

8.4 The Recipient is responsible for ensuring that the Confidential information of the Discloser is kept confidential and secure by any person to whom the Recipient discloses that information.

8.5 The obligations in clause 8.1 do not apply to Confidential Information that is:

8.5.1 in the public domain otherwise than as a result of a breach of this agreement or another obligation of confidence;

8.5.2 created by the Recipient, whether alone or jointly with any person, independently of the Discloser’s Confidential Information (provided the Recipient has evidence in writing that the information falls within this exception); or

8.5.3 already known by the Recipient independently of its involvement in this agreement or its interaction with the Discloser and free of any obligation of confidence and which can be evidenced in writing.

8.6 If a Recipient is required by applicable law to disclose any Confidential Information of the Discloser to a third person, the Recipient must:

8.6.1 before doing so:

  1. 1) notify the Discloser; and
  2. 2) give the Discloser a reasonable opportunity to take any steps that the Discloser considers necessary to protect the confidentiality of that information; and

8.6.2 notify the third person that the information is confidential to the Discloser.

8.7 The Customer must not make any public statement or announcement, or issue any press release, advertising or publicity material or similar statement, in relation to this agreement or its receipt of the Services and/or the Software, unless Oblivious approves in writing the statement, announcement or press release in advance.

8.8 The Customer must not use or reproduce any name, logo, trademark, service mark or branding associated with Oblivious for any purpose, unless Oblivious approves in writing that use or reproduction in advance.

8.9 Notwithstanding the confidentiality obligations in this clause 8, the Customer agrees that Oblivious may publish and display the name and logo of the Customer on Oblivious’ website and thereby identifying the Customer as a customer of Oblivious.

9. Limitation of Liability

9.1 Nothing in this agreement limits any liability which cannot legally be limited, including liability:

9.1.1 for death or personal injury caused by Oblivious' negligence; or

9.1.2 for fraud or fraudulent misrepresentation.

9.2 Subject to clause 9.1, Oblivious shall not be liable whether in tort (including for negligence or breach of statutory duty), contract, misrepresentation, restitution or otherwise for:

9.2.1 any loss of profits, loss of business, wasted expenditure, depletion of goodwill and/or similar losses;

9.2.2 or loss or corruption of data or information; or

9.2.3 for any special, indirect or consequential loss,

in each instance however arising under this agreement.

9.3 Subject to clause 9.1, our total aggregate liability arising in connection with this agreement is limited to the greater of (a) the fees paid by Customer in the twelve (12) months immediately preceding the date the first Claim arose and (b) €100.

10. Indemnity

10.1 Subject to the Oblivious indemnity in clause 10.2, the Customer will indemnify Oblivious against all liabilities, costs, expenses, damages and losses (including but not limited to any direct, indirect or consequential losses, loss of profit, loss of reputation and all interest, penalties and legal costs (calculated on a full indemnity basis) and all other professional costs and expenses) suffered or incurred by Oblivious arising out of or in connection with any claim made against Oblivious by a third party arising out of or in connection with the Customer's use of the Services and/or Software or the Customer's breach of this agreement provided that:

10.1.1 the Customer is given prompt notice of any such claim;

10.1.2 Oblivious provides reasonable co-operation to the Customer in the defence and settlement of such claim, at the Customer's expense; and

10.1.3 the Customer is given sole authority to defend or settle the claim.

10.2 Subject to clause 9.3, Oblivious shall defend and indemnify the Customer against claims, actions, proceedings, losses, damages, expenses and costs (including without limitation court costs and reasonable legal fees, but excluding indirect or consequential losses, loss of profit, or loss of reputation) arising out of or in connection with a claim that the Customer's use of the Services in accordance with this agreement infringes any Intellectual Property Rights of a third party, provided that:

10.2.1 Oblivious is given prompt notice of any such claim;

10.2.2 the Customer does not make any admission, or otherwise attempt to compromise or settle the claim and provides reasonable co-operation to Oblivious in the defence and settlement of such claim, at Oblivious’ expense; and

10.2.3 Oblivious is given sole authority to defend or settle the claim.

10.3 Oblivious will have the right at its discretion to replace or change all of any part of the Software and/or Services which is held to infringe the Intellectual Property Rights of a third party. If such replacement or change is not possible, Oblivious shall have the right to terminate this agreement with immediate effect. The remedies in clause 10.2 and 10.3 are the Customer’s only remedies in respect of its subject matter.

11. Term, Suspension and Termination

11.1 This agreement starts when Customer accepts it and continues until terminated (the "Term").

11.2 Either party may terminate this agreement at any time on written notice.

11.3 We may suspend or terminate Customer's access to the Services immediately on written notice if:

11.3.1 Customer commits a material breach of this agreement and, if the breach is remediable, fails to remedy it within thirty (30) days of being notified;

11.3.2 Customer is subject to an insolvency event, including being unable to pay its debts, having a receiver, examiner or liquidator appointed, or passing a resolution for winding-up;

11.3.3 we are required to do so to comply with law; or

11.3.4 Customer's continued use of the Services could cause risk or harm to us, our users or anyone else.

11.4 On termination for any reason:

11.4.1 all rights of access granted under this agreement end immediately and Customer will cease all use of the Services and the Software;

11.4.2 each party will return or destroy the other's Confidential Information; and

11.4.3 accrued rights and remedies are unaffected.

11.5 On request made within thirty (30) days of termination, we will provide Customer with a copy of Input and Output then in our possession, or temporary access to retrieve it. Thirty (30) days after termination we will delete Input and Output in our possession, unless we are legally required to retain it.

11.6 Nothing in this clause requires us to disclose trade secrets, intellectual property, or anything that could compromise the security of the Software or Services.

12. Force Majeure

12.1 Neither party shall be in breach of this agreement or otherwise liable for any failure or delay in the performance of its obligations if such delay or failure results from events, circumstances or causes beyond its reasonable control, including delays from Oblivious’ suppliers or the failure of Oblivious’ supplier to supply. The time for performance of such obligations shall be extended accordingly. If the period of delay or non-performance continues for three (3) months, the party not affected may terminate this agreement by giving thirty (30) days' written notice to the affected party.

13. Variation

13.1 We may amend these Terms where reasonably necessary to comply with changes in law or regulatory requirements, address security risks or prevent fraud or misuse, maintain compatibility with third-party systems, or reflect improvements or additions to the Services. Any amendment must be reasonable and proportionate to the relevant reason.

13.2 We will notify you by email of any amendment, explaining the change, the reason for it, its effective date and any applicable termination rights, and provide a copy of the updated Terms. We will give at least 30 days’ advance notice, or longer where reasonably necessary. Changes will not apply retrospectively.

13.3 If an amendment adversely affects your rights or obligations, you may terminate this agreement without penalty by notifying us before the amendment takes effect. We will refund any prepaid fees attributable to Services not provided following termination.

13.4 Amendments made in accordance with this clause take effect on the notified date without requiring either party’s signature. Continued use of the Services does not waive the termination rights above. We will obtain your express agreement where required by law.

14. Waiver

14.1 A waiver of any right or remedy is only effective if given in writing and shall not be deemed a waiver of any subsequent right or remedy.

14.2 A delay or failure to exercise, or the single or partial exercise of, any right or remedy shall not waive that or any other right or remedy, nor shall it prevent or restrict the further exercise of that or any other right or remedy.

15. Severance

15.1 If any provision or part-provision of this agreement is or becomes invalid, illegal or unenforceable, it shall be deemed deleted, but that shall not affect the validity and enforceability of the rest of this agreement.

15.2 If any provision or part-provision of this agreement is deemed deleted under clause 15.1 the parties shall negotiate in good faith to agree a replacement provision that, to the greatest extent possible, achieves the intended commercial result of the original provision.

16. Assignment

16.1 The Customer shall not, without the prior written consent of Oblivious, assign, transfer, mortgage, charge, subcontract, delegate, declare a trust over or deal in any other manner with any of its rights and obligations under this agreement.

16.2 Oblivious may at any time assign, mortgage, charge, subcontract, delegate, declare a trust over or deal in any other manner with any or all of its rights and obligations under this agreement, provided that it gives prior written notice of such dealing to the Customer.

17. No Partnership or Agency

17.1 Nothing in this agreement is intended to or shall operate to create a partnership between the parties, or authorise either party to act as agent for the other, and neither party shall have the authority to act in the name or on behalf of or otherwise to bind the other in any way (including, but not limited to, the making of any representation or warranty, the assumption of any obligation or liability and the exercise of any right or power).

18. Notices

18.1 Any notice given to a party under or in connection with this agreement shall be in writing and shall be sent by email:

18.1.1 to Blatent, at hello@blatent.ai or such other address as Blatent notifies to the Customer in writing; and

18.1.2 to the Customer, at the email address on the Customer's Account or most recently notified to Blatent.

18.2 Any notice shall be deemed to have been received at the time of transmission, or, if sent outside Normal Business Hours, at 9.00 am on the next Business Day, provided that the sender does not receive notification of delivery failure.

18.3 Where the sender receives notification of delivery failure, the notice shall be deemed to have been received at the time the sender makes it available to the recipient through the Customer’s Account or the services, or sends it to any other address that the recipient has notified in writing.

18.4 This clause does not apply to the service of any proceedings or other documents in any legal action.

19. Electronic Signature

This agreement is executed and becomes legally binding upon the date you accept it by clicking 'I Agree' (or a similar explicit acceptance mechanism) on our platform. The parties agree that such electronic acceptance constitutes definitive evidence of their intent to be bound by this agreement.

20. Governing Law and Jurisdiction

20.1 This agreement and any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with it or its subject matter or formation, shall be governed by, and construed in accordance with the laws of Ireland.

20.2 Each party irrevocably agrees that the courts of Ireland shall have exclusive jurisdiction to settle any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with this agreement or its subject matter or formation.

Data Processing Addendum (the “DPA”)

1. Definitions

In this DPA:

“Data Controller” means the natural or legal person who is considered to be the ‘data controller’ in relation to the Personal Data under Data Protection Law.

“Data Processor” means the natural or legal person who is considered to be the ‘data processor’ in relation to the Personal Data under Data Protection Law.

“Data Subject” has the meaning ascribed to ‘data subject’ under Data Protection Law.

“Data Sub-Processor” means a data processor engaged by the Data Processor.

“Personal Data” means the personal data described in this Agreement.

“Personal Data Breach” has the meaning ascribed to “personal data breach” under Data Protection Law, to the extent that such breach occurs with respect to the Personal Data.

“Processing” has the meaning ascribed to “process” or “processing” under Data Protection Law, and “Process” shall be construed accordingly.

2. Personal Data and Processing Purposes

2.1 The parties have determined that, for the purposes of Data Protection Law, Oblivious shall Process the Personal Data as a Data Processor on behalf of the Customer when providing the Services under this Agreement.

2.2 The parties agree and acknowledge that the Customer retains control of the Personal Data and remains responsible for its compliance obligations under the Data Protection Law as a Data Controller, including but not limited to, providing any required notices and obtaining any required consents, and for the written processing instructions it gives to Oblivious.

2.3 Annex A describes the Personal Data categories in respect of which Oblivious may process the Personal Data to provide the Services.

2.4 Oblivious shall only act as a Controller in limited circumstances where it processes personal data that it collects for its own purposes, such as Customer account data and data processed for Oblivious’ marketing and service-improvement analytics purposes.

3. Oblivious’ Obligations

Oblivious agrees with the Customer that it shall take reasonable steps to:

3.1.1 Process the Personal Data only in accordance with the Customer’s documented instructions that are set out in this Agreement unless required to do so by mandatory EU or national law to which Oblivious is subject; in such cases Oblivious will inform the Customer of that legal requirement before Processing the Personal Data, where permitted to under that law;

3.1.2 ensure that Oblivious personnel, agents and contractors that Process the Personal Data are subject to appropriate contractual or statutory obligations of confidentiality;

3.1.3 implement appropriate technical and organisational measures against accidental, unauthorised or unlawful processing, access, copying, modification, reproduction, display or distribution of the Personal Data, and against accidental or unlawful loss, destruction, alteration, disclosure or damage of Personal Data including, but not limited to, the security measures set out in Annex B of this DPA;

3.1.4 taking into account the nature of Oblivious’ Processing activities in respect of Personal Data and at the Customer’s cost and request, assist the Customer by appropriate technical and organisational measures, insofar as this is possible, to fulfil the Data Controller’s obligations to respond to requests made by Data Subjects in relation to their rights under Data Protection Law;

3.1.5 taking into account the nature of Oblivious’ Processing of the Personal Data and the information available to Oblivious:

  1. 1) notify the Customer of a Personal Data Breach in relation to the Personal Data without undue delay; and
  2. 2) at the Customer’s request provide reasonable assistance to the Customer in relation to any mandatory obligations applicable to the Data Controller in relation to such Personal Data Breach, under Data Protection Law,

in each case at the Customer’s cost except to the extent that the Personal Data Breach was caused by Oblivious;

3.1.6 taking into account the nature of Oblivious’ Processing of the Personal Data and at the Customer’s cost and request, provide reasonable assistance to the Customer in relation to any mandatory obligations applicable to the Data Controller in relation to:

  1. 1) the performance of data protection impact assessments by the Data Controller under Data Protection Law and, where applicable;
  2. 2) carrying out consultations with the supervisory authority;

3.1.7 at the election of the Customer and at the Customer’s cost, delete or return all the Personal Data to the Customer following expiry or termination of this Agreement, and delete existing copies of such data unless Oblivious is subject to a legal requirement to store such data beyond the expiry or termination of this Agreement;

3.1.8 not have the Personal Data Processed by a Data Sub-Processor except to the extent

  1. 1) authorised by the Customer under paragraph 4.1.3 of this DPA; and
  2. 2) any such Data Sub-Processor is bound by substantially similar data protection obligations as contained in this paragraph 3 in respect of the Personal Data;

3.1.9 subject to paragraph 3.1.4 of this DPA, to the extent required by Data Protection Law, and at the Customer’s cost and request, make available to the Customer information reasonably necessary to demonstrate compliance with its data protection obligations under this DPA and allow for and contribute to audits, including inspections, conducted by the Data Controller or another auditor mandated by the Data Controller, but in each case only in relation to the Personal Data; and

3.1.10 immediately inform the Customer if, in Oblivious’ opinion, an instruction infringes Data Protection Law.

4. Customer’s Obligations

4.1 The Customer agrees and acknowledges that:

4.1.1 with respect to paragraph 4.1.1 of this DPA, the Customer’s instructions that are set out in this agreement accurately reflect the instructions of the Data Controller to the extent that Oblivious is a Data Processor of the Data Controller;

4.1.2 with respect to paragraph 4.1.3 of this DPA, the technical and organisational security measures that Oblivious has agreed to implement with respect to the Personal Data ensure a level of security appropriate to the risk to such data;

4.1.3 with respect to paragraph 4.1.8 of this DPA, Oblivious may have the Personal Data Processed by a Data Sub-Processor to the extent that:

  1. 1) the Data Sub-Processor is any approved Sub-Processor listed in Annex C of this DPA;
  2. 2) the Data Sub-Processor has been previously notified to the Customer;
  3. 3) Oblivious informs the Customer of any intended changes concerning the addition or replacement of other Data Sub-Processors, thereby giving the Customer the opportunity to object; and
  4. 4) any such Data Sub-Processor is bound by substantially similar data protection obligations as contained in paragraph 3 of this DPA;

4.1.4 notwithstanding paragraph 3.1.9 of this DPA, and to the extent permitted by Data Protection Law, Oblivious may demonstrate its compliance with its obligations under section 3 of this DPA through its compliance with a certification scheme or code of conduct approved under Data Protection Law;

4.1.5 Oblivious may transfer and otherwise Process or have transferred or otherwise Processed the Personal Data outside the European Economic Area, including by any Data Sub-Processor of Oblivious; provided that the necessary legal conditions for such transfer and Processing apply to such transfer and Processing, including but not limited, if applicable, EU Standard Contractual Clauses, or a European Commission positive adequacy decision under Article 45 GDPR is in force and covers such transfer;

4.1.6 it has taken measures concerning the Personal Data to ensure compliance with its personal data security and other obligations prescribed by Data Protection Law for Data Controllers;

4.1.7 it shall and shall cause, appropriate notices to be provided to, and (where applicable) valid consents to be obtained from, Data Subjects, in each case that are necessary for Oblivious to Process (and have Processed by Data Sub-Processors) Personal Data under or in connection with the agreement, including Processing outside the European Economic Area on the basis of any of the legal conditions for such transfer and Processing set out in paragraph 4.1.5 of this DPA; and

4.1.8 it shall not, by act or omission, cause Oblivious to violate any Data Protection Law, notices provided to, or consents obtained from, Data Subjects as a result of Oblivious or its Data Sub-Processors Processing Personal Data

Annex A - Types of Personal Data Processed

  1. 1. Identification and Contact Data: name, user name, title, e-mail address, phone number and social media handles.
  2. 2. Marketing Data: preferences in receiving marketing information and other communications.
  3. 3. Technical Data: IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices used.
  4. 4. Transaction Data: payments, products and services purchased, and cancelled transactions.
  5. 5. Usage Data: information about how the website, products and services are used.
  6. 6. Job Application Data: name, contact details, employment and education history, and fields of interest.
  7. 7. Account Data: customer name, organisation, e-mail address, login details and billing information.
  8. 8. Metadata: the model used, token counts, latency, timestamps, and error or performance signals.
  9. 9. Input: prompts, data, instructions and other content submitted to the Software.
  10. 10. Output: content generated by the Software in response to Input.

Annex B - Security

Oblivious will adopt and maintain appropriate technical and organisational security measures in dealing with the Personal Data, in order to protect against unauthorised or accidental access, loss, alteration, disclosure or destruction of such Personal Data, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

In determining those measures, Oblivious will take account of the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.

Annex C - Sub-processors

Oblivious engages sub-processors to provide the Services, including providers of cloud hosting and infrastructure, model hosting and inference, analytics and database services, payment processing, customer relationship and marketing tools, identity and access management, and communication and support software.

Oblivious will provide details of its current sub-processors on request by email to privacy@blatent.ai. Oblivious will give notice of any addition or replacement of a sub-processor by updating that list, and Customer may request to be notified by email of changes. If Customer objects on reasonable data protection grounds, either party may terminate this agreement.