This Data Processing Addendum forms part of the Terms between Driven Success LLC and a Customer where SearchMesh processes personal data on the Customer's behalf.
Roles and instructions
The Customer is the controller or business and SearchMesh is the processor or service provider for Customer Content. SearchMesh processes Customer Content only on the Customer's documented instructions, including the Terms, this addendum, and settings applied through the service, unless law requires otherwise.
Processing details
Processing consists of receiving authenticated search requests; when at least one locally ready, entitled provider candidate exists for automatic search, sending the user's validated query text verbatim and a fixed generic capability taxonomy to OpenAI for classification; selecting and calling eligible search providers; returning normalized results; retaining sanitized validated requests, normalized provider input and successful results for 30 days; maintaining usage information; and securing and supporting the service. SearchMesh does not append provider identities, credentials, secrets, or account metadata to the OpenAI request, but the verbatim query may itself contain information supplied by the Customer. Explicit search_providers bypasses OpenAI classification. Authorized platform administrators may access those sanitized diagnostics across accounts for support and debugging. Data subjects may include the Customer's authorized users and people whose data the Customer includes in a request. Data may include account identifiers, search queries, provider credentials, request metadata, and normalized provider results. Diagnostic snapshots exclude credentials, authorization data, headers, provider-specific transport requests, raw upstream bodies, and exception text.
Security, subprocessors, and deletion
SearchMesh uses appropriate technical and organizational measures, including access controls, encryption for stored provider credentials, and account-scoped data access. The Customer authorizes SearchMesh to use Cloudflare for Worker, database, and network services; OpenAI for automatic query classification when an eligible provider candidate exists; Google or Apple for sign-in where applicable; the search providers called for a request; and the other subprocessors identified in the Privacy Policy. SearchMesh will provide reasonable notice of material subprocessor changes where required by applicable law. On termination or account deletion, SearchMesh deletes Customer Content from active systems as described in the Privacy Policy, unless retention is required by law.
Assistance and transfers
Taking account of the nature of processing, SearchMesh will reasonably assist the Customer with data-subject requests, security incidents, and data-protection assessments where required by law. If personal data is transferred internationally, the parties will use appropriate safeguards required by applicable law. For an executed addendum or questions, contact legal@openclaw.direct.