Specification of Data Processing

Last updated March 2026 · Appendix A to the Data Processing Agreement


1

Subject matter and purposes of the processing


Photosynth AI Limited (trading as Perry AI) provides private capital funds and their legal teams with an AI-powered legal services platform delivered as a SaaS solution.

The Services include an AI platform for legal knowledge work, document processing, agentic legal workflows, contract review, fund document analysis, and related features operating on the Subscriber's own data and documents.

Perry AI shall process Personal Data on behalf of the Subscriber solely for the purpose of providing the Services under the Agreement. Perry AI's processing of Personal Data will be limited to what is necessary to perform the Services.


2

Data subjects


The categories of data subjects whose Personal Data may be processed under this DPA are:

  • Authorised users of the Perry AI platform who are employees, officers, or agents of the Subscriber.

  • Individuals included in Subscriber Content — i.e. natural persons mentioned or otherwise included in the Subscriber's input data submitted to the Perry AI platform, including counterparties, investors, advisers, directors, or individuals named in transaction documents, fund materials, or legal correspondence.


3

Personal Data


The categories of Personal Data that may be processed include:

  • Name, job title, email address, and other contact and identification data relating to authorised users.

  • Any other personal data submitted in prompts, search queries, or documents uploaded into the Services — including personal data contained in transaction documents, fund materials, legal correspondence, cap tables, or other Subscriber Content.

Perry AI does not ordinarily process special categories of personal data (as defined under Applicable Data Protection Laws). The Subscriber shall not submit special categories of personal data to the Services without Perry AI's prior written consent.


4

Duration of processing


Perry AI's processing of Personal Data on the Subscriber's behalf will continue for the duration of the Agreement, or as otherwise agreed between the Parties.

Following termination or expiry of the Agreement, Perry AI will securely delete or return all Personal Data in accordance with clause 11 of the DPA. Unless otherwise agreed or required by applicable law, Subscriber data is retained for up to 90 days following the last active use of the account, after which it is permanently deleted.