Legal

Data processing addendum

Plain language, binding as written. Maja is provided by Looklike, Sweden. Last updated 2026-06-12.

Roles

You are the controller of your workspace and funnel data; Maja by Looklike is the processor, acting only on your documented instructions (the service configuration is the instruction).

Scope of processing

Slack content from channels you add Maja to, intake and brand materials, funnel events, and service telemetry — processed solely to deliver the service described in the Terms.

Security measures

Tenant-scoped data model, AES-256-GCM encryption of tokens at rest, TLS in transit, vault-managed secrets, least-privilege Slack scopes with channel containment, per-action audit logging.

Subprocessors

Listed in the Privacy Policy; we notify before adding any new subprocessor that touches customer content, and you may object on reasonable grounds.

Deletion & return

On termination or request: export within 14 days, deletion from active systems within 30 days and backups within 35, with written confirmation.

No secondary use

Restated here because it's the question that matters: no model training on customer data, no cross-customer reuse, no use for Looklike's own products. Ever.