Data Processing Terms

These Data Processing Terms form part of the Manuseek Terms of Service when Manuseek processes personal data on behalf of a customer organization. They apply to the extent required by applicable data-protection law. “Customer,” “personal data,” “process,” “controller,” and “processor” have the meanings given by the applicable law.

Roles and instructions

Customer is the controller or business responsible for the personal data it connects to Manuseek. Manuseek acts as Customer’s processor or service provider. Manuseek will process that data only on Customer’s documented instructions, including instructions expressed through authorized use of the service, and as needed to provide, secure, support, and improve the reliability of the service or comply with law. Manuseek will notify Customer if an instruction appears to violate applicable data-protection law unless legally prohibited from doing so.

Processing details

The processing covers hosting, indexing, searching, previewing, permission enforcement, troubleshooting, backup, and deletion for the duration of Customer’s use of Manuseek. Data subjects may include Customer’s workforce, contractors, clients, suppliers, and other people represented in Customer content. Data may include account identifiers, work contact details, access permissions, file paths and metadata, document content, search and audit activity, and technical or security records.

Customer responsibilities

Customer will provide lawful instructions, required notices, and a valid legal basis for the data it connects. Customer will limit access to authorized people, configure source and connector permissions, and avoid regulated health information, payment-card data, government-classified information, export-controlled technical data, or other specially regulated information unless Manuseek has expressly agreed in writing to support it.

Confidentiality and security

Manuseek restricts access to personnel and providers who need it to perform the service and who are subject to appropriate confidentiality duties. Manuseek maintains technical and organizational measures appropriate to the service, including encrypted transport, multi-factor authentication, scoped connector credentials, authorization checks, audit records, rate limits, security headers, verified backups, and procedures for responding to suspected incidents. No security measure eliminates all risk.

Subprocessors

Customer authorizes Manuseek to use subprocessors needed to provide the service. Current core subprocessors include Microsoft Azure for application infrastructure and Stripe for payment processing. Customer-selected data sources and connectors are controlled by Customer. Manuseek remains responsible for requiring subprocessors that handle Customer personal data to provide appropriate data-protection commitments.

Requests and compliance assistance

Taking into account the nature of the processing and information available to Manuseek, Manuseek will provide reasonable assistance with verified data-subject requests, security inquiries, impact assessments, and regulator consultations required by applicable law. If Manuseek receives a request concerning Customer-controlled data, it may refer the requester to Customer unless law requires another response.

Security incidents

Manuseek will notify Customer without undue delay after confirming a breach of Customer personal data and will provide information reasonably available to help Customer meet its legal obligations. Notification is not an admission of fault. Customer is responsible for keeping administrative contact information current.

Return, deletion, and retention

Customer can remove users, disconnect connectors, restrict indexed locations, and use available account-deletion controls. After termination or a valid deletion request, Manuseek will delete or render inaccessible Customer personal data that is no longer needed to provide the service, subject to legal, security, fraud-prevention, dispute, and financial-record obligations. Application backups are ordinarily rotated after 14 days. Limited audit or transaction records may be retained or pseudonymized to preserve security and accounting integrity.

International use

Manuseek is currently operated and hosted in the United States. Customer must not deploy the service where additional transfer safeguards or localization commitments are required unless those terms have been agreed in writing.

Verification and contact

On reasonable written request, Manuseek will provide information necessary to demonstrate compliance with these Terms, subject to confidentiality and security limits. Requests, including requests for additional contractual safeguards, may be sent to Manuseek support. The liability limits in the Terms of Service apply to these Data Processing Terms.