Legal
Data Processing Addendum
Last updated November 2, 2026
This Data Processing Addendum (“DPA”) summarizes how Dovewood Capital, LLC, a Texas limited liability company doing business as WorkUnit Labs (“WorkUnit Labs,” “we,” “us”) processes personal data on behalf of its clients. A signed copy is available on request at [email protected].
Roles
You (the client) are the controller of the data in documents you send. We act as your processor and process that data only on your documented instructions.
Purpose
We process data only to produce the entries you request. We do not use client data to train AI models, and we do not sell it.
Security
We use appropriate technical and organizational measures, including encryption in transit and access limited to personnel working on your account, who are bound by confidentiality.
Subprocessors
You authorize the following categories of subprocessors:
- Cloudflare – website hosting, content delivery and storage of form submissions.
- An AI model provider – extraction of invoice fields, under terms that do not permit training on your data.
- Stripe (if used) – payment processing. We do not store full card numbers.
We will tell clients before adding a new subprocessor that handles client documents.
Retention and deletion
We retain data for the period agreed with you, then delete it. On request, or when the service ends, we delete your data unless the law requires us to keep it.
Breach notification
We will notify you without undue delay after becoming aware of a personal data breach affecting your data, and provide information reasonably needed to meet your obligations.
Assistance and audits
We will reasonably help you respond to data-subject requests and provide information needed to show compliance with this DPA.
Governing law
This DPA is governed by the laws of the State of Texas.