Last Updated: January 9, 2025
This Data Processing Agreement ("Agreement") forms part of the Terms of Service between Pinocch AI ("Pinocch", "we", "us", or "our") and you ("User", "you", or "your") governing your use of the AiParse Service ("Service"). This Agreement outlines the obligations of both parties concerning the processing of data submitted through the AiParse API.
The purpose of this Agreement is to ensure that the processing of data submitted to the AiParse Service is conducted in compliance with applicable data protection laws and regulations, while clearly defining the roles and responsibilities of Pinocch and its third-party service providers.
By using the AiParse Service and agreeing to these Terms and Additional Terms, you explicitly consent to Pinocch AI processing your personal data for the purposes outlined in our Privacy Policy. This includes:
Service Functionality: Processing your uploaded documents to provide the core functionality of the Service.
Data Storage: Securely storing your data.
Account Management and Support: Using your data to manage your account and provide customer support.
Communications: Communicating with you about the Service and updates.
Service Improvement: Analyzing usage patterns to enhance the Service.
Third-Party Sharing: Sharing your data with third-party service providers as necessary to operate the Service.
For processing involving sensitive information, we will ensure a lawful basis for processing, including obtaining your explicit consent where required by applicable law. You have the right to withdraw your consent at any time, subject to contractual or legal restrictions. Refer to our Privacy Policy for details on how to withdraw your consent.
Pinocch AI is committed to the principle of data minimization. The AiParse Service is designed to process PDF documents for text extraction and structuring into JSON or Markdown formats. We strongly advise users not to upload documents containing sensitive personal data or personally identifiable information (PII) to the Service.
As the Data Controller, Pinocch AI is responsible for:
Lawful Basis for Processing: Ensuring that there is a lawful basis for the processing of data submitted to the AiParse Service. In most cases, this lawful basis will be the performance of a contract (i.e., providing the Service as requested by the User).
Data Security: Implementing and maintaining appropriate technical and organizational security measures to protect data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, and regular security assessments, aligned with industry best practices.
Data Breach Response: Notifying users without undue delay in the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals.
Data Subject Rights: Facilitating the exercise of data subject rights, such as the right to access, rectification, erasure, and restriction of processing, to the extent that such rights are applicable and technically feasible within the context of the Service.
DPA Compliance: Ensuring that our data processing activities comply with the terms of this Agreement and applicable data protection laws.
Transparency: Providing clear and transparent information about our data processing practices in our Privacy Policy and this Agreement.
We engage reputable third-party AI service providers (including OpenAI, Anthropic, Google Cloud Platform, Amazon Web Services) to assist in the provision of the AiParse Service. These service providers adhere to their own data protection policies as outlined in their respective terms and conditions on their official websites.
Subject Matter: The AiParse API processes documents uploaded by users for the purpose of text extraction and structuring into JSON or Markdown formats. Each document is assigned a unique task_id for tracking.
Duration: Processing typically completes within 3 to 5 minutes, depending on document complexity and system load. Users can delete processed files using the provided task_id. The duration of processing is determined by the user's actions and the time it takes to process the document.
The AiParse Service is designed to process the textual content of documents. While we do not target or intentionally collect personal identifiable data, the types of data processed may include any information contained within the PDF documents uploaded by users.
Pinocch AI strongly discourages users from uploading documents containing personal identifiable data or sensitive information. While we implement industry-standard security measures, we cannot guarantee the absolute security of data transmitted over the internet or processed by third-party services.
Pinocch AI shall not be held liable for any damages, losses, or liabilities arising from the unauthorized access, use, or disclosure of personal data contained in documents uploaded by users, provided that Pinocch AI has complied with its obligations under this Agreement and applicable data protection laws.
The data subjects are the individuals (if any) whose data may be contained within the documents uploaded by our users.
Third-party providers are obligated to maintain confidentiality, implement appropriate security measures, provide data breach notifications, and assist with data subject rights requests. These obligations are detailed in the Data Processing Agreements (DPAs) established with each provider.
The conditions under which third-party providers may engage sub-processors are outlined in their respective DPAs. Generally, sub-processors may only be engaged with the prior written consent of Pinocch AI and must be subject to equivalent data protection obligations.
We reserve the right to audit the data processing activities of third-party providers to ensure compliance with the DPAs and applicable data protection laws.
This Agreement shall be governed by and construed in accordance with the laws of Hong Kong, without regard to its conflict of laws principles.
Pinocch AI reserves the right to modify this Agreement at any time. We will notify users of any material changes to this Agreement. Continued use of the Service after such notification constitutes acceptance of the modified Agreement.
If you have any questions about this Data Processing Agreement, please contact us at service@pinocch.com.