Data Processing Addendum
This Data Processing Addendum (“Addendum”) is entered into by and between PLCs.ai, Inc., a Delaware corporation with offices at Suite 400, 258 Newark Street, Hoboken, New Jersey 07030, United States (collectively, the “Company”) and the company, entity, or individual identified in the applicable Order or account registration for the provision of the Company's service (“Customer”).
The Company may be involved in processing certain personal data or personal information from PLC files and related content only on behalf of Customer as part of its PLCs.ai platform, including the cloud-based web application known as plcsai-cloud, the desktop companion application known as plcsai-rva, and our website at plcs.ai (the “Service”), pursuant to a “Customer Agreement” between Customer and the Company, which includes our Terms of Service incorporated within and/or an Order (the “Terms”).
Part 1 – General Provisions
Always applies and is in force for Services, to the extent that the Service will involve the processing of individuals’ personal data.
Part 2 – EU/EEA or UK GDPR DPA
Only if Customer is subject to the UK or EU/EEA GDPR regarding the personal data that the Company processes when providing the Services.
Part 3 – US State Privacy Laws
Only if Customer is subject to state privacy laws in the United States regarding the personal data that the Company processes when providing the Services.
General Provisions
EU/EEA or UK GDPR DPA
US State Privacy Laws
means the CPRA and other applicable state privacy laws in the United States, such as (but not limited to): Virginia Consumer Data Protection Act, Connecticut Act Concerning Personal Data Privacy and Online Monitoring, Utah Consumer Privacy Act, and the Colorado Privacy Act.
means any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Covered Information, during its processing by the Company.
means a natural person, including a natural person in their professional or work capacity.
means Cal. Civ. Code §1798.100 et seq. and the regulations at 11 C.C.R. §7000 et seq.
means information that the Company's Service stores, handles, or otherwise maintains for and on behalf of Customer.
(and its cognate terms) means any operation or set of operations that are performed on Covered Information or on sets of Covered Information, whether or not by automated means.
(and its cognate terms) means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, Covered Information for monetary or other valuable consideration.
(and its cognate terms) means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, Covered Information for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.
Appendix A — Data Processing Details
Customer employees
Customer content
1. Information uploaded to the Service, including:
Uploaded PLC files — PLC programs, routines, tag databases, and configuration files (including Allen-Bradley and Siemens formats)
Prompts, instructions, and other inputs to AI features
AI-generated outputs such as analyzed, modified, or newly generated PLC code, explanations, and documentation
Customer pictures
Other related content
2. Personal details included in employees' user accounts, such as a profile picture or full name
Continuous during the Term, to the extent that the Service provided by the Company will involve the processing of individuals' personal data.
Collection, organization, structuring and delivery of such data on behalf of the Customer as specified under the Terms. The nature of the processing is mainly to electronically collect, process and provide Service.
Personal data is contained in the data which Customer provides through the Service. Company has access to such data solely for purposes pursuant to the Terms and this Addendum.
During the provision of the Service, until deleted from the Service or upon termination.
Customer Content (PLC Files and AI Outputs) — 30 days archive after deletion or termination. Customer may request export by emailing support@plcs.ai. Backups deleted in normal rotation. Archive-as-a-feature is available separately and governed by the Customer Agreement.
Personal details included in employees' user accounts — Term of subscription + 90 days. Held in archive for retrieval; purged from active systems after 90 days. Retained longer if required by law.
Cloud infrastructure, payment processing, email delivery, customer support tooling, third-party AI model providers (no training is allowed), and analytics. A current list of our Subprocessors is available upon request at privacy@plcs.ai. The Company will notify the Customer of any material changes to our Subprocessors in advance.
For questions about this Addendum, to request a signed copy, or for Subprocessor information, contact us at privacy@plcs.ai.