Data Processing Addendum

Last updated: July 25, 2026

Scope

This Data Processing Addendum ("DPA") describes how Eberything Limited (operating the Gup product) processes personal data on behalf of customers as a data processor, where customer data includes end-user conversations, connected knowledge sources, and data retrieved via integrations you enable (such as Shopify order and fulfillment data).

Processing instructions

Gup processes customer data only to provide, maintain, and improve the service, and in accordance with each customer's instructions given through the dashboard — including when an agent Action looks up an order after visitor verification.

Location of processing

Primary customer data at rest (conversations, accounts, knowledge) is stored in Supabase in Singapore (Southeast Asia / ap-southeast-1). Generative AI inference and embeddings for chat run on Google Vertex AI in asia-southeast1 (Singapore). Application hosting (Vercel) and other sub-processors may process data in additional regions as needed to operate the service.

AI processing and model training

Generative AI inference is provided by Google Vertex AI. Under Google Cloud’s Service Specific Terms (Training Restriction), Google will not use Customer Data to train or fine-tune AI/ML models without prior permission or instruction. Gup likewise does not use Customer Data to train foundation models. Customer Data may still be stored in the Customer’s Gup workspace (for example conversations and knowledge) as needed to provide the service.

Sub-processors

We use a limited number of infrastructure sub-processors (such as our hosting, database, email, and AI model providers) under agreements that require equivalent data protection commitments. Primary database: Supabase (Singapore). AI inference: Google Vertex AI (asia-southeast1 / Singapore). Application hosting: Vercel. When you connect Shopify, Shopify processes data under its own terms as your platform; Gup accesses that data as your processor using credentials you authorize.

Requesting a signed DPA

Customers on Growth and Scale plans needing a countersigned DPA can request one at[email protected].