Montr AI – Data Processing Agreement (DPA)
Version: 1.0 | Effective Date: December 11, 2025
This Data Processing Agreement (“DPA”) forms part of the Montr AI Terms and Conditions and Privacy Policy and applies automatically whenever a customer (acting as a “Controller”) uses Montr AI to process personal data on their behalf (Montr AI acting as “Processor”).
By using the Services, you (the Controller) enter into this DPA on behalf of yourself and any entity you represent. If you are signing up on behalf of a company or organization, you represent that you have the authority to bind that entity.
1. Definitions
Terms such as “personal data”, “processing”, “Controller”, “Processor”, “Data Subject”, and “Supervisory Authority” have the meaning given in GDPR (Regulation (EU) 2016/679) and equivalent terms in other applicable data protection laws.
2. Details of Processing
| Item | Description |
|---|---|
| Subject matter | Provision of Montr AI’s generative AI services |
| Duration | For the duration of your subscription + 30 days after termination |
| Nature and purpose | Generating text, images, video, code, and other content based on user prompts |
| Categories of data subjects | Users’ end-customers, employees, contacts, or any individuals whose data is included in Inputs |
| Types of personal data | Any personal data contained in Inputs or Outputs (e.g., names, emails, photos, voice, identifiers) |
3. Obligations of Montr AI (Processor)
Montr AI shall:
3.1 Process personal data only on documented instructions from you (including this DPA), unless required by law.
3.2 Ensure persons authorised to process the data are bound by confidentiality.
3.3 Implement appropriate technical and organisational measures (encryption at rest & in transit, access controls, regular security testing).
3.4 Assist you with data subject requests, data protection impact assessments, and breach notifications.
3.5 Notify you without undue delay (and in any event within 72 hours) after becoming aware of a personal data breach.
3.6 Delete or return all personal data after termination of services (except where technically feasible).
3.7 Make available information necessary to demonstrate compliance and allow for audits (upon reasonable notice and no more than once per year, at your expense).
4. Sub-Processors
You authorise Montr AI to engage the following categories of sub-processors:
- Cloud hosting providers (Oracle Mumbai, AWS Mumbai, AWS Mumbai, Google Cloud)
- Payment processors (Stripe, Razorpay, PayPal)
- Analytics & error tracking (Google Analytics, Sentry, PostHog)
- Email & support tools (Resend, Crisp, Zendesk, Brevo)
Current list and updates are available at Subprocessors.
5. International Transfers
When personal data originating in the EEA, UK, or Switzerland is processed, Montr AI relies on:
- EU Standard Contractual Clauses (2021/914) – executed between you and Montr AI
- UK International Data Transfer Addendum (where applicable)
You hereby enter into the SCCs with Montr AI as part of this DPA.
6. Liability
Each party’s liability under this DPA is subject to the same limitations and exclusions as in the main Terms and Conditions.
7. Governing Law
This DPA is governed by the laws of Switzerland (for EU/UK/Swiss data subjects) and the laws of India (for all other data subjects).
Contact
Data Protection inquiries: hi@montr.io
Montr AI
Office 3, AMUIF, AMU, Aligarh, U.P., India – 202001
By continuing to use Montr AI, you accept this DPA.