1. About these terms

These Terms of Service ("Terms") govern access to and use of dAIsy, a business software, automation and artificial intelligence platform provided by JAM AI Limited.

References in these Terms to "JAM AI", "we", "us" or "our" mean JAM AI Limited.

References to "dAIsy" or the "Service" mean the services, software functionality, tools, account access, integrations and related services made available by JAM AI under the dAIsy brand.

References to "Customer", "you" or "your" mean the business or organisation purchasing, accessing or using dAIsy directly from JAM AI. Where dAIsy is accessed through a Partner under Section 18, that Section explains how these Terms apply.

By creating an account, starting a trial, purchasing a subscription, clicking to accept these Terms or otherwise using dAIsy, you agree to these Terms on behalf of the business or organisation you represent.

If you accept these Terms on behalf of a company or other organisation, you confirm that you have authority to bind that organisation.

2. Business use only

dAIsy is supplied on a business-to-business basis only.

You confirm that you are acquiring and using dAIsy wholly or mainly for purposes relating to your trade, business, craft, profession or organisation and not as a consumer for personal use.

These Terms are therefore intended to govern commercial relationships between JAM AI and business customers.

For clarity, a sole trader or self-employed person purchasing dAIsy wholly or mainly for their business is treated as a business customer under these Terms.

3. Eligibility and authority

You must be at least 18 years old to create a dAIsy account or accept these Terms.

If you are accepting these Terms on behalf of a company, partnership or other organisation, you confirm that you are authorised to bind that organisation to these Terms, and that the organisation has the legal capacity to enter into a binding commercial agreement.

JAM AI may ask you to confirm your identity and authority to act for the business named on the account before providing or continuing to provide the Service.

4. The dAIsy service

dAIsy provides businesses with access to a range of business management, marketing, communications, automation and AI-enabled functionality.

Depending on the package selected, dAIsy may include functionality such as:

•      contact and lead management;

•      customer relationship and sales pipeline management;

•      shared communications and inbox functionality;

•      email and SMS communications;

•      calendars, bookings, confirmations and reminders;

•      missed-call response functionality;

•      forms, landing pages, surveys and lead-capture tools;

•      reputation and review-management tools;

•      workflows and business automation;

•      email marketing and nurture campaigns;

•      social media scheduling;

•      funnels and advanced lead-capture tools;

•      reporting and lead-source attribution;

•      AI-powered content and conversational tools;

•      memberships and recurring-revenue functionality;

•      affiliate and referral-management functionality;

•      website-building tools; and

•      integrations with third-party services.

The features available to you depend on the package, configuration and services you have purchased. The current features of each package are described on the dAIsy website or relevant order page.

5. Customer configuration and use of features

Unless JAM AI expressly agrees otherwise in writing, the availability of a feature within dAIsy does not mean that JAM AI will configure, operate or manage that feature for you.

You are responsible for configuring and managing your own account, including your workflows, automations, campaigns, communications, forms, funnels, calendars, pipelines, AI instructions, integrations and other functionality.

Where JAM AI separately agrees to provide onboarding, configuration, consultancy or implementation services, the scope of those services will be determined by the applicable package, proposal, order or other written agreement.

You remain responsible for reviewing your account configuration and ensuring it is suitable for your business.

6. Packages and fees

dAIsy is available under different subscription packages. The fees applicable to your subscription are the fees displayed to you on the applicable website, order page or checkout page when you subscribe.

Prices may be displayed exclusive of VAT before checkout. The final VAT-inclusive amount displayed at checkout is the amount payable.

JAM AI may change its prices from time to time. A price change will not retrospectively alter an amount already paid. Where a price change affects a future renewal, JAM AI will provide reasonable notice where appropriate.

7. Seven day free trial

Where offered, new customers may receive a 7-day free trial. You will normally be required to provide valid payment details when starting the trial. No subscription fee will be charged during the 7-day trial period.

You may cancel at any time before the end of the trial and, provided cancellation is completed before the trial expires, no subscription fee will be charged.

If you do not cancel before the trial ends, your trial will automatically convert into the paid subscription package you selected and the applicable subscription fee will be charged to your chosen payment method.

By starting the free trial, you expressly authorise this automatic conversion and subsequent recurring subscription payments unless you cancel.

8. Payment

Payments are processed using third-party payment providers, including Stripe. You authorise JAM AI and its payment providers to charge the payment method associated with your account for all fees due under your subscription.

You are responsible for maintaining valid and current payment information. If a payment fails, further payment attempts may be made and you may be contacted regarding the failed payment.

JAM AI may restrict or suspend access where subscription fees remain unpaid.

9. Monthly subscriptions

Monthly subscriptions renew automatically each month unless cancelled. You may cancel at any time. Cancellation prevents the next renewal payment from being taken.

Unless otherwise agreed, you will retain access until the end of the monthly subscription period for which you have already paid. No partial refund is normally provided where you choose to stop using dAIsy before the end of that paid period.

10. Annual subscriptions

Annual subscriptions renew automatically each year unless cancelled. You may cancel at any time. Cancellation prevents the next annual renewal payment from being taken.

You will normally retain access until the end of the annual period for which you have already paid. Annual subscription fees are not normally refundable in whole or in part merely because you choose to stop using the Service before the end of the paid annual term.

Nothing in these Terms limits any refund right that cannot lawfully be excluded.

11. Your account and account security

You are responsible for:

•      maintaining the confidentiality and security of login credentials;

•      ensuring that only authorised users access your account;

•      controlling permissions granted to your users;

•      using reasonable security measures, including multi-factor authentication where available and appropriate;

•      promptly removing access for users who should no longer have access; and

•      notifying JAM AI promptly if you suspect unauthorised access or a security incident involving your account.

You are responsible for activity carried out through your account by your authorised users.

12. Customer content and data

You retain ownership of information, content and materials that you or your authorised users upload, create or provide through dAIsy ("Customer Content"), including customer records, contact information, photographs, logos, documents, website content, campaign materials, forms, products, service information and other business data.

You grant JAM AI a limited, non-exclusive right to host, copy, transmit, process and otherwise use Customer Content only to the extent reasonably necessary to provide, maintain, secure and support the Service, comply with lawful instructions and fulfil our legal obligations. Where JAM AI uses service-usage information to improve dAIsy for its own purposes, it will do so using aggregated or de-identified information where reasonably practicable.

You confirm that you have all rights, permissions and lawful bases necessary to provide Customer Content to dAIsy and to instruct JAM AI to process it.

13. Data protection

Each party will comply with applicable data-protection law, including the UK GDPR and Data Protection Act 2018.

For personal data relating to your own customers, prospects, contacts, employees or other individuals that you process through dAIsy:

•      you will normally act as the controller;

•      JAM AI will normally act as your processor; and

•      third-party infrastructure and service providers used by JAM AI may act as sub-processors.

JAM AI may separately act as a controller in relation to information it processes for its own legitimate business purposes, including customer-account administration, billing, security, fraud prevention and its direct relationship with you.

The data-processing provisions in Schedule 1 form part of these Terms. Our Privacy Policy provides further information about JAM AI's processing of personal data.

JAM AI is registered with the UK Information Commissioner's Office (ICO) as a data controller. Our current ICO registration reference is available on request from [email protected].

14. Marketing, email, SMS and communications

dAIsy may provide tools for sending emails, SMS messages and other communications. You are solely responsible for determining who you communicate with and for ensuring that your communications comply with applicable law.

You must comply with all applicable requirements, including where relevant:

•      UK GDPR;

•      the Privacy and Electronic Communications Regulations 2003 ("PECR");

•      direct-marketing rules;

•      telecommunications rules;

•      carrier and network requirements;

•      platform/provider terms; and

•      applicable laws in the country of the recipient.

You are responsible for having any consent, lawful basis or other permission required for your communications, and for honouring unsubscribe requests, withdrawals of consent, objections and suppression requirements.

You must not use dAIsy to send unlawful spam or other prohibited unsolicited communications.

JAM AI may restrict or suspend communications functionality where we reasonably believe your use may breach law, generate excessive complaints or threaten JAM AI's relationship with an underlying service provider.

15. Artificial intelligence

Some dAIsy functionality uses artificial intelligence. AI-generated content and responses may be inaccurate, incomplete, inappropriate, misleading or unsuitable for a particular purpose.

You are responsible for reviewing AI-generated output before relying on it, publishing it or communicating it to another person where appropriate. You remain responsible for:

•      information and instructions you provide to AI functionality;

•      knowledge sources uploaded to AI systems;

•      configuration of AI assistants and workflows;

•      communications generated using AI; and

•      decisions you make based on AI output.

You must not use dAIsy's AI functionality as the sole basis for making decisions that have significant legal or similarly significant effects on an individual where applicable law requires human involvement or additional safeguards.

You must not use AI functionality for fraud, unlawful impersonation, discrimination, harassment, unlawful activity or other harmful or prohibited purposes.

Where an end user is interacting with an AI or automated assistant, you should provide appropriate transparency and must not deliberately mislead that individual into believing they are communicating with a human where this would be deceptive or unlawful.

15.1 How AI functionality uses your data

Where dAIsy's AI features process Customer Content in order to generate output for your account (for example, drafting a reply or summarising a conversation), that content may be transmitted to specialist third-party AI providers strictly in order to produce the requested output.

JAM AI does not use Customer Content to train general-purpose or foundation AI models operated by JAM AI or by third-party AI providers. JAM AI engages third-party AI providers as sub-processors under contractual terms that restrict their use of Customer Content to providing the requested functionality, and not for the provider's own model training, except where a Customer separately and knowingly connects a third-party AI tool under that provider's own terms.

JAM AI may use aggregated or de-identified usage information to maintain, secure and improve dAIsy generally, consistent with Section 12.

AI models, providers, capabilities and features may change from time to time.

16. Acceptable use

You must not use dAIsy:

•      unlawfully or fraudulently;

•      to infringe another person's rights;

•      to distribute malware or malicious code;

•      to compromise security or interfere with the Service;

•      to gain unauthorised access to systems or data;

•      for abusive, threatening or unlawful conduct;

•      to send unlawful spam;

•      to conduct unlawful surveillance;

•      to impersonate another person unlawfully;

•      to store or transmit content you have no right to use;

•      in a way that materially degrades the Service for other users; or

•      in a manner that causes JAM AI or its providers to breach law or provider obligations.

You must not attempt to reverse engineer, decompile, disassemble, extract source code from or otherwise seek to reconstruct the underlying technology used to provide dAIsy except to the limited extent that such restriction is prohibited by law.

17. Third-party services and infrastructure

dAIsy is a service provided and supported by JAM AI, but elements of the Service are delivered using third-party software, infrastructure and services. In particular, dAIsy uses software and infrastructure provided by HighLevel, Inc. (also known as GoHighLevel or HighLevel), alongside other providers for services such as hosting, payments, communications, email, SMS, telephony, artificial intelligence and integrations.

HighLevel and other third-party providers are not parties to these Terms and do not provide the Customer with a direct contractual support relationship for dAIsy. Customer support for dAIsy is provided by JAM AI.

JAM AI does not control all third-party services and cannot guarantee that every third-party integration, provider or feature will always remain available, unchanged or compatible with dAIsy.

Where you choose to connect a third-party service to dAIsy, you are responsible for complying with the terms and policies applicable to that service.

JAM AI may modify, replace or discontinue an integration or underlying provider where reasonably necessary because of a provider change or for legal, technical, security or commercial reasons. Where such a change materially affects a paid core feature, JAM AI will take reasonable steps to minimise disruption and provide notice where appropriate.

18. Resellers, partners and white-label arrangements

JAM AI may make dAIsy available indirectly through agencies, consultants or other businesses who resell, bundle or white-label dAIsy to their own clients ("Partners"). This Section applies wherever dAIsy is accessed through a Partner rather than purchased directly from JAM AI.

18.1 Partner's own agreement with its clients

A Partner is responsible for its own contractual relationship with the businesses it introduces to dAIsy ("End Customers"), including pricing, invoicing, support commitments and any representations the Partner makes about dAIsy. JAM AI is not a party to, and has no liability under, the agreement between a Partner and its End Customers, except to the extent expressly agreed in writing between JAM AI and that Partner.

18.2 Flow-down of these Terms

A Partner must ensure that each End Customer is bound by terms that are at least as protective of JAM AI as these Terms, including the acceptable-use, data-protection, AI, and intellectual-property provisions. Where an End Customer's use of dAIsy breaches these Terms, JAM AI may treat that breach as a breach by the Partner and may suspend or restrict access accordingly under Section 24.

18.3 Data-processing chain

Where a Partner or an End Customer determines the purposes for which personal data is processed through dAIsy, that party will normally be the controller (or processor for its own client, where the Partner itself acts as a processor), and JAM AI will act as processor or sub-processor as applicable, on the terms set out in Schedule 1. A Partner reselling dAIsy to End Customers is responsible for putting in place its own lawful arrangements with those End Customers covering that processing chain.

18.4 Branding and representations

A Partner may present dAIsy under its own or a co-branded identity only to the extent agreed in writing with JAM AI. A Partner must not make representations about dAIsy's functionality, security, pricing or availability beyond what JAM AI publishes or expressly authorises.

18.5 Fees and account status

Fees, revenue share and account administration arrangements between JAM AI and a Partner are set out in a separate partner agreement or order form. Where a Partner's own account with JAM AI is suspended or terminated, access for that Partner's End Customers may also be affected, and JAM AI will act reasonably in minimising disruption to End Customers where practicable.

19. International use and data transfers

dAIsy is currently offered primarily to customers based in the United Kingdom. If JAM AI offers dAIsy to customers based in the European Economic Area, Switzerland or elsewhere, JAM AI will take the steps required by applicable data-protection law, including appointing an EU representative under Article 27 of the EU GDPR where required, and will make current contact details available on request from [email protected].

Where dAIsy or its sub-processors transfer personal data outside the United Kingdom, JAM AI will rely on an appropriate transfer mechanism or safeguard required by UK data-protection law, as further described in Schedule 1.

If you intend to use dAIsy to communicate with individuals located outside the United Kingdom, you remain responsible under Section 14 for complying with the marketing, telecommunications and data-protection laws applicable to those individuals.

20. Service availability

JAM AI will use reasonable efforts to keep dAIsy available and operating. However, dAIsy is not guaranteed to be uninterrupted, error-free or continuously available.

Availability may be affected by:

•      maintenance;

•      upgrades;

•      internet or telecommunications failures;

•      third-party outages;

•      infrastructure failures;

•      cyber-security incidents;

•      force majeure events; or

•      circumstances outside JAM AI's reasonable control.

JAM AI will use reasonable efforts to assist customers and restore affected functionality where reasonably possible.

21. Support

Support for dAIsy is provided by JAM AI. Customers should contact dAIsy/JAM AI rather than underlying technology providers regarding their dAIsy account.

Support is available through the channels made available by JAM AI from time to time. Unless expressly agreed in writing, JAM AI does not guarantee 24-hour support, a particular response time or a particular service-level agreement.

22. Intellectual property

JAM AI and its licensors retain all rights in their respective intellectual property. JAM AI owns or controls, where applicable, intellectual property relating to its own:

•      dAIsy brand;

•      logos;

•      website content;

•      documentation;

•      training materials;

•      templates;

•      prompts;

•      configurations;

•      workflow structures;

•      processes;

•      methodologies; and

•      other original materials created by JAM AI.

Your subscription gives you a limited right to use those materials only as necessary to use dAIsy during your subscription. You retain ownership of your Customer Content.

Underlying software, infrastructure, source code, patents, trademarks and other intellectual property belonging to third-party technology providers remain the property of those providers or their licensors. Nothing in these Terms transfers ownership of underlying third-party technology to JAM AI or to you.

Unless otherwise agreed in writing, reusable templates, workflows, frameworks, know-how, configurations and methodologies developed by JAM AI remain JAM AI's property even where adapted or used in providing services to a particular customer.

23. Changes to the service

dAIsy will evolve over time. JAM AI may add, update, modify, replace or discontinue features. We will not materially remove the core functionality of a paid Service without reasonable commercial justification.

Where a significant change materially reduces the Service you have purchased, JAM AI will take reasonable steps to provide notice where appropriate.

24. Suspension

JAM AI may suspend some or all access to dAIsy where reasonably necessary, including where:

•      payment is overdue;

•      you materially breach these Terms;

•      your use appears unlawful;

•      your account creates a security risk;

•      your activity creates a risk to JAM AI or an underlying provider;

•      excessive complaints or spam reports arise;

•      we reasonably suspect fraud or misuse; or

•      suspension is required by law or an underlying service provider.

Where a breach is capable of remedy and the circumstances permit, JAM AI will normally provide a reasonable opportunity for you to correct it. Serious security issues, fraud, unlawful activity or other urgent situations may justify immediate suspension.

25. Termination by JAM AI

JAM AI may terminate your account for a serious or repeated breach of these Terms.

Where JAM AI decides to terminate the Service for commercial reasons and you have not breached these Terms, JAM AI will normally give at least 30 days' notice.

If JAM AI terminates a prepaid subscription for its own commercial reasons before the end of the paid term, JAM AI will refund the proportion of subscription fees relating to the unused period after termination.

26. Data following cancellation or termination

Your access to dAIsy will normally end when your paid subscription period ends. You should export any information you need before your access ends.

JAM AI may retain account data for up to 90 days following cancellation or termination to allow for account recovery, reactivation, operational requirements and orderly deletion. After that period, account data may be permanently deleted and may not be recoverable.

Certain services and data may be removed sooner. In particular, telephone numbers and associated telecommunications registrations may be released, removed or deleted within shorter periods imposed by underlying providers and should not be assumed to remain available for 90 days.

Where applicable, you may request earlier deletion, subject to legal, regulatory, fraud-prevention, security, backup and record-keeping obligations.

27. Customer responsibility

You are responsible for your use of dAIsy. In particular, JAM AI is not responsible for losses arising from:

•      workflows or automations you configure incorrectly;

•      instructions you give to AI functionality;

•      inaccurate Customer Content;

•      incorrect or incomplete information uploaded by you;

•      communications you choose to send;

•      unlawful marketing by you;

•      third-party integrations you choose to connect;

•      actions of your authorised users; or

•      your failure to follow instructions or maintain appropriate account security,

except to the extent that the loss is directly caused by JAM AI's breach of these Terms or negligence and liability cannot lawfully be excluded.

28. Limitation of liability

Nothing in these Terms excludes or limits liability where it would be unlawful to do so, including liability for:

•      death or personal injury caused by negligence;

•      fraud or fraudulent misrepresentation; or

•      any other liability that cannot lawfully be excluded or limited.

Subject to the above, JAM AI will not be liable for indirect or consequential losses. To the extent permitted by law, JAM AI will not be liable for loss of profit, revenue, anticipated savings, business opportunity, goodwill or business interruption, where such loss is indirect or consequential.

Subject to liabilities that cannot lawfully be limited, JAM AI's total aggregate liability arising out of or in connection with dAIsy and these Terms will not exceed the total subscription fees actually paid by you to JAM AI for dAIsy during the 12 months immediately preceding the event giving rise to the claim or, if you have subscribed for less than 12 months, the total subscription fees paid since your subscription began.

The limitations in this section reflect the nature and price of the Service and the allocation of commercial risk between the parties. They are intended to apply only to the extent permitted by applicable law, including any requirement that a limitation or exclusion be reasonable.

29. Force majeure

Neither party will be liable for failure or delay caused by circumstances outside its reasonable control. This may include natural disasters, government action, telecommunications failures, internet outages, cyber incidents, failure of utilities, industrial disputes, war, civil disturbance, epidemics, failures of third-party infrastructure and similar events.

30. Changes to these terms

JAM AI may update these Terms from time to time. Where a change is material, we will take reasonable steps to notify existing customers before the updated Terms take effect. Continued use of dAIsy after an updated version takes effect constitutes acceptance of the revised Terms where permitted by law.

31. Notices

You should keep your account contact information current. Notices from JAM AI may be delivered by email, through dAIsy or through another reasonable electronic method. Notices to JAM AI should be sent to [email protected].

32. Assignment

You may not assign or transfer your rights under these Terms without JAM AI's prior written consent. JAM AI may assign these Terms as part of a genuine corporate restructuring, sale, merger or transfer of the dAIsy business, provided this does not materially reduce your contractual rights.

33. Severability

If any part of these Terms is found invalid, unlawful or unenforceable, that provision will be modified to the minimum extent necessary or, where modification is not possible, treated as deleted. The remainder of the Terms will continue in effect.

34. No waiver

Failure by either party to enforce a right under these Terms does not waive that right.

35. Entire agreement

These Terms, together with any applicable order, proposal, the data-processing terms in Schedule 1 and any other terms expressly incorporated into them, constitute the agreement between JAM AI and the Customer regarding dAIsy. The Privacy Policy explains how JAM AI processes personal data when acting as controller and is provided for transparency; it does not form part of the commercial contract unless expressly stated otherwise.

They replace prior discussions or representations relating to the same subject matter, except where expressly incorporated into a written agreement. Nothing in this section excludes liability for fraud or fraudulent misrepresentation.

36. Governing law and jurisdiction

These Terms and any dispute or non-contractual obligation arising out of or in connection with them are governed by the laws of England and Wales. The courts of England and Wales will have jurisdiction to determine disputes arising out of or in connection with these Terms.

Schedule 1 — Data Processing Terms

1. Application

This Schedule applies where JAM AI processes personal data on behalf of the Customer in connection with dAIsy. For such processing: Customer = Controller; JAM AI Limited = Processor. Where the Customer itself acts as a processor for another controller (including where dAIsy is accessed through a Partner under Section 18), JAM AI will act as a sub-processor to the extent applicable.

2. Subject matter and duration

The subject matter of processing is the provision of dAIsy and related functionality. Processing continues for the duration of the Customer's subscription and for any limited retention period following termination, subject to deletion, backup, legal and regulatory requirements.

3. Nature and purpose of processing

Processing may include collection, recording, organisation, structuring, storage, retrieval, consultation, transmission, communication, automation, analysis, modification, hosting, support, security monitoring, deletion and other processing reasonably necessary to provide dAIsy. The purpose is to provide, operate, secure and support dAIsy in accordance with the Customer's lawful instructions.

4. Types of personal data

Depending on how the Customer uses dAIsy, personal data may include names, email addresses, telephone numbers, addresses, customer and prospect information, communications, appointment and booking information, notes, tags, marketing preferences, website-form submissions, survey responses, CRM records, conversation records, transaction information, technical identifiers and other information uploaded by the Customer.

Customers should avoid processing special-category or highly sensitive personal data through dAIsy unless necessary, lawful and appropriately safeguarded.

5. Categories of data subject

Data subjects may include Customer employees, authorised users, customers, prospective customers, website visitors, suppliers, business contacts, contractors and other individuals whose personal data the Customer chooses to process through dAIsy.

6. Customer instructions

JAM AI will process personal data only on the Customer's documented instructions, as necessary to provide dAIsy, or where required by applicable law. The Customer's use and configuration of dAIsy constitutes documented instructions for the processing necessary to provide the Service. JAM AI will promptly inform the Customer if, in JAM AI's reasonable opinion, an instruction infringes applicable data-protection law, unless JAM AI is prohibited by law from doing so.

7. Confidentiality

JAM AI will ensure that persons authorised to process Customer personal data are subject to appropriate confidentiality obligations.

8. Security

JAM AI will maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, including, where appropriate, access controls, authentication, encryption, infrastructure security, monitoring, backups, vulnerability management and organisational security procedures.

9. Sub-processors

The Customer gives JAM AI general written authorisation to appoint and use third-party sub-processors where reasonably necessary to provide dAIsy, subject to the safeguards in this section. Sub-processors may include HighLevel, Inc. and providers of cloud hosting, software infrastructure, communications, email, SMS, telephony, artificial intelligence, payment processing, analytics, security and integrations.

JAM AI will enter into appropriate written arrangements with each applicable sub-processor requiring data-protection obligations that provide a level of protection appropriate to the processing. JAM AI remains responsible to the Customer for the performance of the data-protection obligations it has delegated to its sub-processors, to the extent required by applicable data-protection law.

JAM AI may add or replace sub-processors from time to time. Where required by applicable data-protection law, JAM AI will give the Customer reasonable prior notice of a new or replacement sub-processor and an opportunity to raise a reasonable, documented objection on data-protection grounds. The parties will work in good faith to address any such objection.

Where a third-party AI provider is used as a sub-processor, JAM AI will require, so far as reasonably achievable through its contract with that provider, that Customer Content is not used by that provider to train its own general-purpose or foundation models, consistent with Section 15.1.

10. International transfers

Some sub-processors may process personal data outside the United Kingdom. Where required by applicable law, JAM AI will rely on an appropriate transfer mechanism or safeguards for restricted international transfers, which may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved Standard Contractual Clauses, or another lawful transfer mechanism recognised under UK data-protection law.

11. Data-subject rights

Taking into account the nature of processing, JAM AI will provide reasonable assistance to the Customer where necessary to enable the Customer to respond to lawful requests from individuals exercising their data-protection rights.

12. Security incidents

JAM AI will notify the Customer without undue delay after becoming aware of a personal-data breach affecting personal data processed on the Customer's behalf. The Customer remains responsible for determining whether notification to the ICO, another regulator or affected individuals is required unless law provides otherwise.

13. Compliance assistance

Taking into account the nature of processing and information available to JAM AI, JAM AI will provide reasonable assistance in relation to security obligations, data-protection impact assessments, regulator consultations, personal-data breaches and demonstrating compliance with applicable processor obligations.

14. Audits and information

JAM AI will make available information reasonably necessary to demonstrate compliance with its processor obligations. Where reasonable assurance can be provided through documentation, certifications, security information or independent reports, the Customer should use those methods before requesting an on-site audit.

Any audit request must be reasonable, proportionate, subject to confidentiality obligations and must not unreasonably disrupt JAM AI's business. Nothing in this paragraph limits any audit, inspection or information right that cannot lawfully be restricted or that is required by a competent regulator.

15. Return and deletion

At the Customer's choice, following termination of the Service JAM AI will delete or return Customer personal data, unless applicable law requires continued storage. The Customer should make any return/export request before or promptly after access ends. Deletion may be subject to limited retention in backups, security records, legal records or systems where immediate deletion is not technically practicable, provided the retained information remains appropriately protected and is not used for other purposes except where required by law.

16. Customer obligations

The Customer is responsible for determining the lawful basis and purposes of its processing; providing appropriate privacy information to individuals; obtaining consent where required; ensuring its instructions are lawful; ensuring the personal data it provides is accurate and appropriate; responding to data-subject requests as controller; determining appropriate retention periods; and using dAIsy in compliance with applicable data-protection law.