Service Data Privacy Statement

Definitions

• "Customer" means a legal entity with whom Oasis Stack has an agreement to provide the Services.
• "Service Data" means data submitted to or processed by Oasis Stack on behalf of the Customer.
• "Personal Data" means information relating to an identified or identifiable natural person.

Scope

This Statement applies when Oasis Stack processes Personal Data as a processor on behalf of a Customer in the course of delivering the Services. The Customer remains the controller and is responsible for the lawful basis of processing.

Data We Process

• Account and identity data (administrator names, emails, roles).
• Telemetry and operational logs required to operate the platform.
• Customer-submitted Service Data hosted on Oasis Stack infrastructure.

Purposes of Processing

• Provide, maintain, and secure the Services as described in the MSA.
• Detect, prevent, and respond to security incidents.
• Comply with legal obligations and respond to lawful requests.

How We Protect Data

Oasis Stack maintains administrative, technical, and organizational measures designed to protect Service Data, including encryption in transit and at rest where applicable, role-based access controls, and audit logging.

Sub-processors

Oasis Stack may engage sub-processors to support delivery of the Services. A current list is available on request and Customers will be notified of material changes in accordance with the MSA.

Location of Service Data

Customers may select supported regions for primary hosting of Service Data. Oasis Stack offers sovereign deployment options for Customers with data residency requirements.

Data Subject Rights

Where data subjects contact Oasis Stack directly, we will refer them to the relevant Customer. Oasis Stack will provide reasonable assistance to Customers in responding to data subject requests.

Contact

For privacy questions related to the Services, contact oasisstack.ai.