Data Processing Addendum

This summary describes how ChatCommerce360, Inc. processes personal data on behalf of customers when they use our services. A signed Data Processing Addendum (DPA) forms part of the customer agreement; this page is an overview, not the contract.

For customer data processed through the platform, the customer is the controller and ChatCommerce360 is the processor, acting on the customer’s documented instructions.

We maintain technical and organizational measures appropriate to the risk (see the Security & Trust page) and engage subprocessors under written terms with equivalent obligations. Our current subprocessors are listed on the Subprocessors page.

Where personal data is transferred internationally, we rely on appropriate safeguards, including the EU Standard Contractual Clauses where applicable.

We assist customers in responding to data-subject requests and will notify affected customers without undue delay upon becoming aware of a personal-data breach affecting their data.

To execute a DPA, contact privacy@chatcommerce360.com.