Version 1.0 · Effective 2026-09-27
This Data Processing Agreement (“DPA”) is entered into between:
Together, the “Parties“.
This DPA supplements the BessCare Terms of Use and applies to your use of the following tools on bess.care (the “Tools“):
1.1. You are the Controller of any Personal Data contained in the documents or text you upload. You represent and warrant that you have a lawful basis to submit such documents for processing.
1.2. BessCare is the Processor acting on your behalf, for the sole and limited purpose of generating your report (the “Report“).
1.3. The Obligation Check tool processes no uploaded documents and no Personal Data; it runs entirely in your browser. It is outside the scope of this DPA.
2.1. BessCare processes the uploaded documents only to:
2.2. The processing is not used by BessCare to:
3.1. Immediate deletion. The uploaded document and the extracted text are deleted from our servers immediately after your Report is generated. We do not store the document, the extracted text, or any full-text copy after that point.
3.2. What is retained. Only the structured Report content (clause excerpts, notes, summary) is kept in transient server memory to deliver the result to your browser. This memory is cleared automatically within 24 hours and on any service restart. We do not persist the Report to disk or a database.
3.3. Model provider. The extracted text is transmitted to the model provider for the duration of the analysis call only. See Section 7 for the sub-processor and location.
4.1. The data processed is limited to whatever you choose to upload: contract text, quotation text, and any Personal Data contained therein (which may include names of signatories, contact details, and company information).
4.2. We ask that you redact any special categories of personal data (e.g. identification numbers, financial account details) before uploading. We do not require such data to provide the service.
5.1. Technical measures:
5.2. Organisational measures:
6.1. You remain responsible for responding to data subjects. BessCare will, taking into account the nature of processing, provide reasonable assistance to help you fulfil your obligations where possible.
6.2. Because documents are deleted immediately (Section 3), a request to access, rectify or erase data contained in a previously uploaded document generally cannot be fulfilled after deletion — there is nothing retained to return or erase. We will confirm deletion in response to any such request.
7.1. BessCare uses the following sub-processor to perform automated document analysis:
| Sub-processor | Service | Purpose | Location of processing |
|---|---|---|---|
| Moonshot AI (Beijing Moonshot Technology Ltd.) | kimi-k3 large language model | Automated first-pass text analysis of your uploaded documents | People’s Republic of China |
7.2. International transfer. By using the Tools, you acknowledge and accept that the extracted text of your documents is transferred to the sub-processor in the People’s Republic of China for the duration of the analysis call. This transfer is:
7.3. If you cannot accept transfer of your document text to this sub-processor, do not upload documents containing personal or confidential data to the Tools. The Obligation Check tool remains fully available without any such transfer.
7.4. We will notify you of any change to the sub-processor list, and you may object by ceasing use of the affected Tools.
8.1. BessCare treats the uploaded documents as confidential and does not disclose them to any third party except the sub-processor in Section 7, to the extent necessary to generate your Report.
8.2. BessCare personnel who access the processing environment are bound by confidentiality obligations.
9.1. To the maximum extent permitted by law, and without limiting the general limitations of liability in the Terms of Use, BessCare’s aggregate liability under this DPA is limited to the amount paid by you for the Tools in the 12 months preceding the event giving rise to liability. The Tools are provided free of charge; accordingly, no fee-based liability cap applies and our liability is limited to direct damages caused by our breach of this DPA.
9.2. The Tools provide automated first-pass screening only and do not constitute legal or investment advice.
10.1. Upon reasonable written request and subject to confidentiality, BessCare will provide information to demonstrate compliance with this DPA. Because no documents are retained (Section 3), audits of retained data are generally not applicable.
11.1. This DPA is governed by the laws of Belgium, without regard to conflict-of-laws principles. The courts of Antwerp, Belgium have exclusive jurisdiction.
11.2. If the Customer is a consumer, nothing in this DPA limits rights under mandatory consumer-protection law of the Customer’s place of residence.
Besscare OÜ — Data protection: info@bess.care