Data Processing Agreement

Last updated: October 25, 2026

This Data Processing Agreement ("DPA") is between the customer ("you") and Interlink Digital Group Limited, company 05431902, trading as MetalCloud ("MetalCloud", "we", "our", or "us"). It applies when we process personal data in your job content on your behalf. It forms part of the Terms of Service. If this DPA and the Terms differ on that processing, this DPA prevails.

1. Roles

You are the controller of personal data in the prompts, files, and other material you submit, and in the output that contains that personal data ("Job Content"). We are the processor.

We are the controller of account, website, billing, and host records. That processing is described in the Privacy Policy and is outside this DPA.

You confirm that you have a lawful basis for the personal data you submit, and that your instructions to us are lawful.

2. Processing

We process Job Content so we can run the compute job you submit, store it as the Privacy Policy describes, and return the output to you. The duration is the life of the account, and then the retention period in section 8.

The personal data is whatever you include in the job. The categories of data subject are the people that content is about. You decide both.

Our instructions from you are the Terms, this DPA, and the actions you take in the product: submitting a job, deleting a job, and closing the account. If we believe an instruction breaks UK GDPR, we will tell you.

3. Confidentiality and security

People who can see Job Content are you, Interlink staff who are operating or supporting the service, and, under Schedule B only, the assigned host. Staff access is limited to what the task requires. Hosts are bound by the Host Agreement.

Connections use TLS. Jobs run in a sandbox. Account secrets are encrypted with AES-256-GCM. Job records in the platform database are not all encrypted at rest. We do not hold SOC 2. ISO 27001 is not certified.

4. Sub-processors

• Stripe. Card payments. Stripe does not receive Job Content.
• Postmark. Transactional email about the account and the service.
• Interlink Verify. The bot check when an account is created.
• Google Fonts. Font files for the website. Google Fonts does not receive Job Content.
• The assigned host. Schedule B only. The host receives the Job Content in order to run the job.

Before we add a sub-processor who would receive Job Content, we will post the change on this page, or email you, at least 30 days before. You may stop using the affected service before that date. The rest of the account continues.

5. Assistance

We will give you reasonable help with a data-subject request, a security enquiry, or a consultation with a regulator, where that request concerns Job Content we hold. You remain the controller. We will not answer the data subject about Job Content except on your instruction, or where the law requires us to.

6. International transfers

Schedule A and Schedule B describe where Job Content is processed. A reserved-machine job runs in the United Kingdom. A host-network job may run outside the United Kingdom, and submitting that job is your instruction to make the transfer.

7. Personal data breach

If we become aware of a personal data breach affecting Job Content, we will tell you without undue delay. The notice will describe what we know about the breach, the likely consequences, and the measures we have taken or propose to take. You are responsible for any notice to a regulator or to data subjects that the law requires of a controller.

8. Deletion and return

You can delete a job in the product. On a written instruction to privacy@metalcloud.space we will delete the Job Content you name. When you close the account, Job Content is deleted within 30 days. There is no automatic 24-hour deletion.

You can download output through the product while the job record exists. Billing records are kept for 6 years. They are account records, not Job Content, and this deletion duty does not apply to them.

9. Audit

You may send written questions about our compliance with this DPA to privacy@metalcloud.space. We will answer within a reasonable time, and not more than 30 days unless we tell you we need longer. This clause does not give a right to enter a machine, or to see another customer's data.

10. Liability and law

The liability clause in the Terms applies to this DPA. Nothing in this DPA excludes or limits liability that the law does not allow us to exclude or limit. This DPA is governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

Schedule A: Reserved machine

This schedule applies to a booking of the reserved machine.

• The job runs on the UK-hosted machine named in the booking.
• During a reserved month we do not allocate that machine to another customer.
• Job Content for that booking is not sent to the host network.
• A record of the job is kept in the platform database, as the Privacy Policy describes. We do not publish a cloud region for that database.

Schedule B: Host network

This schedule applies when you submit a host-network job. It does not apply to a reserved-machine booking.

• We send the Job Content to the assigned host so the host can run the job.
• The Mac may be outside the United Kingdom. By submitting the job you instruct that transfer.
• The host must not copy, keep, or reuse the Job Content except to run the job. That duty is in the Host Agreement.
• A host-network job does not include single-tenant use of a machine.
• A record of the job is kept in the platform database, as the Privacy Policy describes.

Contact

Interlink Digital Group Limited t/a MetalCloud, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom. Email: privacy@metalcloud.space and legal@metalcloud.space.