Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the agreement between you ("Controller") and KreativeRock Digital Limited, RC 1441363, Lagos, Nigeria ("Processor"), and applies whenever KreativeRock processes personal data on your behalf as part of the platform — for example, the contacts you upload for messaging. It supplements our Privacy Policy.

1. Subject matter and duration

KreativeRock processes personal data on your instructions for the duration of your use of the platform, solely to provide the messaging and AI automation services you sign up for.

2. Nature and purpose of processing

Storing, organizing, and using the contact data, message content, and Knowledge Bank content you provide, in order to send messages, deliver AI Sales Assistant responses, and bill you accurately for usage.

3. Categories of data subjects and data

Your own contacts (customers, leads, or prospects), consisting of names, phone numbers, email addresses, message content, and any custom fields you choose to store.

4. Our obligations as Processor

• We process personal data only on your documented instructions, as expressed through your use of the platform.
• We ensure staff with access to personal data are bound by confidentiality.
• We apply appropriate technical and organizational security measures, described in our Privacy Policy.
• We notify you without undue delay after becoming aware of a personal data breach affecting your data.
• We assist you, where reasonably possible, in responding to data subject rights requests (access, correction, deletion) relating to your contacts.
• On termination of your account, we delete or return your data within a reasonable period, except where retention is required by law.

5. Sub-processors

We use the same sub-processors listed in our Privacy Policy (Vercel, Neon, Clerk, Amazon SES, Inngest, Anthropic, Meta, our SMS and RCS network partners, Cloudflare, and Paystack/Flutterwave for payments). Each is bound by its own data protection terms. We will update that list if a new sub-processor is added.

6. International transfers

Personal data may be processed outside your own country, including in the European Union and the United States, as described in our Privacy Policy. Where that happens, we rely on the standard contractual clauses offered by our sub-processors.

7. Audit

On reasonable request, we will provide information necessary to demonstrate compliance with this DPA.

Contact

KreativeRock Digital Limited, RC 1441363, Lagos, Nigeria.
Email info@kreativerock.com. Phone +234 809 420 0003.