Perplexity Data Processing Addendum

This document sets out the rules for how Perplexity AI handles your Personal Data when providing its Services: it may only use your data to provide those Services, cannot sell it or use it to train its AI models, and must delete or return it within thirty days after the Services end. As the Customer, you are also responsible for ensuring that any Personal Data you send to Perplexity AI was collected and handled lawfully. If you disagree with a subcontractor Perplexity AI appoints, your only options are limited — for Model Providers you can stop using that model, and for other subcontractors you can terminate the agreement and recover unused prepaid fees.

This Data Processing Addendum establishes the obligations, rights, and limitations governing Perplexity AI's processing of Personal Data on behalf of the Customer in connection with the Services. Perplexity AI is restricted to processing Personal Data solely on documented Customer instructions and for the limited purpose described in Annex 1, and is prohibited from Selling, Sharing, or using Personal Data outside the direct business relationship or for LLM training. The Customer bears affirmative obligations to ensure all Personal Data it provides was collected, processed, and maintained in compliance with applicable Privacy Laws, and is prohibited from taking any action that would reclassify the data transfer as a Sale or Share or cause Perplexity AI to lose its Service Provider or Processor status. Perplexity AI retains full liability under EU/UK Privacy Laws for subcontractor failures, must delete or return Personal Data within thirty days of Services termination, and must provide ten business days' written notice before appointing or replacing non-Model-Provider subcontractors. Customer audit rights are capped at once per twelve months upon thirty days' advance written notice and mutual agreement on scope, and the Customer's sole remedies for unresolved subcontractor objections are termination and refund of unused prepaid Fees.

For an individual user acting as the Customer under this addendum, the document means that Perplexity AI will not use Personal Data to train its large language models and must delete or return all Personal Data within thirty days of the Services ending. The Customer bears a formal, enforceable warranty that all Personal Data it provides was lawfully collected, noticed, and consented to under applicable Privacy Laws — making prior compliance by the Customer a contractual obligation, not merely a best practice. If Perplexity AI's subcontractors fail to meet their obligations, Perplexity AI remains fully liable under EU/UK Privacy Laws. A Customer who wishes to verify compliance may submit a written audit request, providing thirty days' advance written notice and agreeing on scope, with this right available no more than once every twelve months.