bizcontext.ai™

Data processing agreement

Effective: October 23, 2026

This Data Processing Agreement ("DPA") is between 2Secure Corp ("2Secure", "we", "us"), which provides BizContext™, and the business customer that uses BizContext ("Customer", "you"). It forms part of the Terms of service and applies whenever we process personal data on your behalf through BizContext. It takes effect when you start using the service, without a separate signature. If you need a countersigned copy for your records, email info@bizcontext.ai.

1. Roles

  • You decide which accounts to connect and how BizContext is used. You are the business (or "controller") responsible for the personal data in those accounts.
  • We process that personal data only to provide BizContext to you, as your service provider (or "processor").
  • Each party will comply with the privacy and data protection laws that apply to it.

2. Details of the processing

  • Purpose. Providing BizContext: reading the accounts you connect and producing briefs, relationship timelines, drafted replies, answers, deadline tracking and search; and running the projects, project chat, whiteboards and agents your users set up.
  • Nature of the processing. Collecting, storing, indexing, analyzing, summarizing, and deleting content, and passing messages your users approve to their own email provider for sending.
  • People whose data is processed. Your users, and the people they correspond with, such as your customers, suppliers, partners and colleagues.
  • Types of personal data. Names, email addresses and other contact details; message content, chat messages, files, documents and attachments; and any other personal data contained in the accounts you connect.
  • Sensitive data. BizContext is not designed to process special categories of data such as health information. If such data appears in the accounts you connect, it is processed only as part of providing the service.
  • Duration. For as long as you use BizContext, followed by deletion as described in section 9.

3. Processing only on your instructions

We process personal data only on your documented instructions. Your use and configuration of BizContext, these terms and the Terms of service are your instructions. We will tell you if we believe an instruction breaks the law. We do not sell personal data, share it for advertising, use it to train AI models, or use it for any purpose other than providing BizContext to you.

4. AI processing

By default, BizContext's AI models run on servers owned and operated by 2Secure Corp in the United States, and that processing is part of our processing under this DPA. Personal data is not sent to any outside AI company.

You may instead choose an outside AI service from the list shown in BizContext. We list only services whose terms prohibit using customer content to train or improve their models, we will not send personal data to any AI service that is not on the list, and we review the listed services' terms regularly. An outside AI service you choose is engaged by you under your own agreement with it, and is not our service provider under this DPA.

5. Confidentiality

Everyone at 2Secure who may access personal data is bound by a duty of confidentiality and has access only as needed to provide, secure or support the service. Our staff do not read your content except as described in our Privacy policy.

6. Security

We maintain technical and organizational measures to protect personal data, including at least:

  • encryption of data in transit and at rest;
  • encryption of all stored tokens and connection details for the accounts you connect;
  • separation of each customer's data from every other customer's data;
  • no sharing of a user's connected-account data with anyone else at your company unless that user shares it; content placed in a shared project is visible to that project's members;
  • restricted staff access to production systems, granted only as needed; and
  • deletion of your data when the service ends, as described in section 9.

We may update these measures over time, but will not reduce the overall level of protection.

7. Service providers (subprocessors)

  • You authorize us to use the service providers listed on our Service providers page.
  • We will notify you at least 30 days before adding or replacing a service provider that processes personal data. You may object on reasonable data protection grounds. If we cannot address the objection, you may end the service for the affected part without penalty.
  • We bind each service provider to data protection terms at least as protective as this DPA, and we remain responsible for their performance.

8. Helping you meet your obligations

  • Requests from individuals. If someone asks to access, correct or delete their personal data, we will help you respond. If a request comes to us directly, we will pass it to you and not respond ourselves unless you ask us to or the law requires it.
  • Assessments. We will give you reasonable information to help you complete data protection impact assessments and consultations with authorities about BizContext.

9. Deletion

When the service ends, or when you ask, we delete the personal data we hold for you right away, including copies of your content, the information derived from it, and all tokens and connection details. Backup copies are deleted within 24 hours. If a free trial ends without a paid subscription, or an account has had no sign-in and no working connections for 90 days, we email a warning first and then delete that account's data as described above. BizContext keeps its copy in step with your connected accounts. When you delete or change an email, file or message there, our copy, and anything derived from it, is deleted or updated at the next sync. Deletion affects only our copies; your connected accounts are not changed. We keep data longer only if the law requires it, and then only for that purpose.

10. Security incidents

If we become aware of a breach of security that leads to the accidental or unlawful loss, alteration, disclosure of, or access to your personal data, we will notify you without undue delay and in any case within 72 hours. We will tell you what happened, what data is affected, and what we are doing about it, and we will keep you updated as we learn more.

11. Information and audits

On request, we will provide the information reasonably needed to show that we meet this DPA, such as answers to security questionnaires and summaries of our security practices. If that information is not enough, or if a regulator requires it, you may audit our compliance with reasonable notice, no more than once a year, during business hours, under a confidentiality agreement, and at your cost.

12. International transfers

We store and process personal data only in the United States, on servers owned and operated by 2Secure Corp at its own facility. If the law that applies to you restricts transferring personal data to the United States, contact us before using BizContext so that appropriate transfer terms can be put in place.

13. United States privacy laws

Where US state privacy laws apply, including the California Consumer Privacy Act, we act as your service provider or processor. We will not sell or share personal data; will not keep, use or disclose it for any purpose other than providing BizContext to you, or outside our direct business relationship with you; and will not combine it with personal data we receive from other sources, except as those laws allow. We will tell you if we can no longer meet these obligations.

14. General

  • Each party's liability under this DPA is subject to the limits in the Terms of service.
  • If this DPA conflicts with the Terms of service about personal data, this DPA controls. If you have a separately signed data processing agreement with us, that agreement controls.
  • This DPA ends when we have deleted all personal data we process for you.

15. Contact

Questions about this DPA: info@bizcontext.ai.
2Secure Corp, 1405 Route 35, Suite 101, Ocean, NJ 07712