Data Processing Agreement (processors)

Customer is the controller of personal data in files and account records it submits. Movify.CY Ltd. (“Processor”) processes that data to provide MultiVoice Studio, API and MCP.

This DPA supplements the User Agreement at https://multivoice.ai/terms and the Privacy Policy at https://multivoice.ai/privacy.

Processing: speech recognition, subtitling, translation, dubbing, transcription, audiobook production, wallet billing, OAuth authentication.

Duration: the term of the Service plus retention in the Privacy Policy (media generally 30 days after fulfilment; billing records as required by law).

Audio/video, text, language settings, order metadata, account identifiers. Special categories are not sought; do not upload health or other Art. 9 data unless a separate addendum is signed. Court-hearing audio is processed under stricter access (one certifying employee).

Processor processes only on documented instructions (orders you place, MCP execute_create after human Approve). Processor does not train foundation or production models on Customer content unless Customer opts in in writing. Technical processing to fulfil an order is not training.

EU infrastructure in Cyprus and Latvia. Stripe, Inc. / Stripe Payments Europe for wallet top-up. Changes to subprocessors that process Customer content will be notified to the contracting email; Customer may object on reasonable GDPR grounds.

Measures: TLS, access control, isolated GPU/file servers, time-limited MCP download URIs, OAuth scopes.

Customer may request a written security summary once per year. After the Service ends, media are deleted per the 30-day rule unless law requires longer storage of invoices.

Processor assists with data-subject requests forwarded by Customer and notifies Customer without undue delay after becoming aware of a personal-data breach affecting Customer data.

Cyprus law, as in the User Agreement. To execute: email info@multivoice.ai with company name, VAT, and signatory.