Data Processing Agreement
DRAFT — PLACEHOLDER. This text is a structural placeholder pending legal review. It is not yet binding.
Last updated: 26 June 2026
This Data Processing Agreement ("DPA") forms part of the Terms of Service between the customer ("Controller") and TidyChat ("Processor") and applies where TidyChat processes personal data on the Controller's behalf.
1. Subject Matter
The Processor processes personal data to provide the TidyChat Service to the Controller as described in the Terms of Service.
2. Roles
The Controller determines the purposes and means of processing. The Processor processes personal data only on documented instructions from the Controller.
3. Duration and Scope
Processing continues for the duration of the subscription. Categories of data subjects and personal data are those the Controller submits to the Service (e.g. contacts, leads, message content).
4. Processor Obligations
- Process personal data only on the Controller's instructions.
- Ensure persons authorised to process data are bound by confidentiality.
- Implement appropriate technical and organisational security measures.
- Assist the Controller with data subject requests and security obligations.
5. Sub-processors
The Controller authorises the Processor to engage sub-processors listed in our documentation. We remain responsible for their compliance and will give notice of changes.
6. International Transfers
Cross-border transfers rely on appropriate safeguards such as Standard Contractual Clauses.
7. Security
Security measures include encryption in transit, per-workspace data isolation, access controls, and immutable audit logging.
8. Data Subject Requests
The Processor will assist the Controller in responding to requests to exercise data subject rights under applicable law.
9. Deletion and Return
On termination, the Processor will delete or return personal data at the Controller's choice, subject to legal retention requirements.
10. Audits
The Processor will make available information necessary to demonstrate compliance and allow for reasonable audits.