Legal & Compliance

AICtrlNet legal documents

Bodaty LLC, an Illinois limited liability company, publishes the following legal documents covering AICtrlNet™, HitLai™, and related services. All documents are version-controlled; material changes are notified to Account administrators at least 30 days before they take effect.

Master Agreement
Terms of Service
The master agreement governing access to and use of the AICtrlNet platform and HitLai interface, including Implementation Services (DWY), AI-specific terms, indemnification, and dispute resolution.
v2.0 · Effective May 1, 2026
Privacy & Data Use
Privacy Policy
How Bodaty collects, uses, shares, retains, and protects personal data. Covers GDPR, UK GDPR, Swiss FADP, CCPA/CPRA, Colorado AI Act, and EU AI Act deployer support.
v2.0 · Effective May 1, 2026
Business · Click-Through
DPA — Business
The default DPA for Business-edition (Starter, Growth, Scale) subscribers. Click-through; no countersignature. Covers GDPR Art. 28, SCCs Modules Two and Three, AI-specific processing, output ownership, DWY hours.
v2.1 · On Customer acceptance
Enterprise · Negotiated Template
DPA — Enterprise
The procurement-grade negotiated DPA template. Adds on-site audit rights, custom data residency, dedicated DPO contact, regulatory-fines indemnification, negotiated SCC parties, and countersignature execution.
v2.1 · On Customer countersignature
Community · Free Tier
DPA — Community
GDPR Art. 28 minimums for Bodaty-operated Community services. Not applicable to self-hosted Community deployments — those carry no controller-processor relationship with Bodaty.
v1.0 · On account creation
Annex C · Sub-Processors
Sub-Processors List
The current sub-processors and AI Sub-Processors that process personal data under the DPAs, with categories, regions, and transfer mechanisms. 15-day notice for AI Sub-Processor changes; 30-day for others.
Updated May 29, 2026

Legal entity, governing law, and notices

Legal entity: Bodaty LLC, an Illinois limited liability company.
Registered office: 200 E. 5th Ave., Suite 121DE, Naperville, IL 60563, United States.
Governing law (TOS): State of Illinois. Jurisdiction: federal and state courts located in Cook County, Illinois. Arbitration venue: Chicago, Illinois (JAMS, single arbitrator, class waiver, 1-year limitation).
Legal inquiries: legal@aictrlnet.com
Privacy inquiries / data-subject rights: privacy@aictrlnet.com
Security disclosures: security@aictrlnet.com

How these documents work together

The Terms of Service is the master agreement and incorporates the Privacy Policy by reference. The Privacy Policy describes Bodaty's data practices for all editions. Three DPAs are published — one per edition tier — and each applies where Bodaty processes personal data on behalf of a customer (Controller): the Business click-through DPA (default for Starter / Growth / Scale subscribers, no countersignature), the Enterprise negotiated DPA template (procurement-grade, countersigned), and the Community free-tier DPA (Bodaty-operated Community services only; self-hosted Community deployments carry no controller-processor relationship). The Sub-Processors list is Annex C of each DPA and is incorporated into both the DPAs and the Privacy Policy by reference.

External references and verification