Data processing terms are set out in the Privacy Policy: Section 3 (sub-processors), Section 4 (data shared with AI providers), Section 5 (legal basis), Section 6 (retention), Section 8 (international transfers) and Section 15 (agreements between agency customers and their clients), reproduced below. Agency customers who require a signed data processing agreement for their own compliance can request one by email; see the contact page.
15.1. Users acting as independent controllers of their clients' personal data must enter into personal data processing agreements with their clients. The Company bears no liability for a User's violation of this provision.