Data Processing Agreement

Effective: March 20, 2026

---

This Data Processing Agreement forms part of the agreement between The Plain Works Inc. (주식회사 더플레인웍스) ("Company" or "Claradb") and the applicable customer.

1. Roles of the Parties

Customers may act as controllers or processors depending on the workflow. Claradb acts as a processor when it handles customer-controlled personal data through workspace and account features.

2. Scope of Processing

Claradb processes customer data only as necessary to provide the service, maintain security, support reliability, prevent abuse, and comply with legal obligations.

3. Security

Claradb maintains technical and organizational measures appropriate to the service, including access controls, encrypted transport, vendor review, and operational safeguards.

4. Subprocessors

Claradb may use subprocessors for hosting, authentication, search, billing, analytics, email delivery, and supporting AI workflows. Our current list is maintained at claradb.ai/legal/subprocessors.

5. International Transfers

Where international transfers occur, Claradb will rely on lawful transfer mechanisms and contractual safeguards appropriate to the transfer.

6. Contact

Questions about this DPA can be sent to privacy@claradb.ai.