askwell

Data processing agreement (DPA)

Last updated: October 22, 2026

Roles

For the answers collected by your forms, you are the controller and Flukx Studio is the processor under Article 28 GDPR. The full agreement, based on the European Commission's standard contractual clauses (Decision 2021/915), is being drafted. Until then, this summary sets out our commitments.

Processing

  • hosting forms and collecting answers;
  • follow-ups: the form title and description, the labels of its questions (without the other answers), the current question and answer (with its earlier follow-ups) are sent to the AI model to write a follow-up question;
  • summary cards: the full response is sent to the AI model, which extracts a summary, the need, budget, timeline and points to clarify;
  • webhooks: each response is sent to the URLs you set up;
  • statistics: anonymous visit measure, with no cookie and no IP address.

Data and data subjects

Your forms' respondents: identity, contact details and the answers they enter. No sensitive data is expected; you agree not to collect any without a legal basis.

Duration

As long as your account exists. You can export your responses as CSV at any time; deleting the account erases your forms and their responses at once. Technical data is purged sooner, following the periods in the privacy policy.

Our commitments

  • process data only on your documented instructions;
  • ensure confidentiality for everyone authorised to access it;
  • encrypt data in transit and at rest, and restrict access to it;
  • help you handle data subject requests;
  • notify you of any personal data breach without undue delay, and within 72 hours at most;
  • allow reasonable audits.

Sub-processors

  • Supabase: database and storage, in the European Union;
  • Anthropic: AI model used for follow-ups, summary cards and form generation, processed outside the European Union under standard contractual clauses;
  • Cloudflare: application hosting, transfers covered by the Data Privacy Framework and standard contractual clauses.

Any change to this list is announced in advance; you can object to it.

Cookies

askwell forms set no cookies on your respondents' devices.