Data Processing Addendum

Effective Date: December 22, 2025

1. Overview

This Data Processing Addendum ("DPA") forms part of the Terms of Service between Leveraging AI, LLC ("ChatifyIT," "we," "us") and you ("Customer") for the use of the ChatifyIT platform.

This DPA applies when you process personal data through ChatifyIT and your users are located in regions with data protection laws such as GDPR, CCPA, or similar regulations.

2. Definitions & Roles

Your Role (Data Controller)

You determine what personal data to collect through your chat agents and how it will be used. You are responsible for:

  • Obtaining necessary consents from users
  • Providing required privacy notices
  • Complying with applicable data protection laws
  • Responding to user rights requests (access, deletion, etc.)

Our Role (Data Processor)

We process personal data only on your behalf and according to your instructions. We:

  • Store data you collect through chat agents
  • Provide tools for you to access, export, and delete data
  • Implement appropriate security measures
  • Use subprocessors to deliver the service

3. Data Processing

Types of Personal Data

We process personal data that you choose to collect through your chat agents, which may include:

  • Email addresses
  • Names and contact information
  • Chat conversation history
  • IP addresses and timestamps
  • Any custom fields you configure

Processing Activities

  • Storing personal data in secure databases
  • Enabling chat agent functionality
  • Providing data export capabilities
  • Maintaining backups for disaster recovery

4. Security Measures

We implement appropriate technical and organizational measures to protect personal data:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of data at rest in databases
  • Secure authentication and access controls
  • Regular security updates and monitoring
  • Employee confidentiality agreements
  • Secure backup procedures

5. Subprocessors

We use third-party service providers (subprocessors) to help deliver the ChatifyIT platform. All subprocessors are required to maintain appropriate data protection standards.

For a complete list of our subprocessors, see: ChatifyIT Subprocessors

We will notify you at least 30 days before adding new subprocessors. If you reasonably object on data protection grounds, please contact us at legal@chatifyit.io

6. Data Subject Rights

You are responsible for responding to data subject requests (access, deletion, portability, etc.). We provide tools in your dashboard to:

  • Export collected data in CSV format
  • Delete specific user records
  • View all collected data

If we receive a data subject request directly, we will forward it to you for handling.

7. Data Deletion

Upon termination of your account:

  • We retain your data for 30 days to allow account recovery
  • After 30 days, all personal data is permanently deleted
  • You may export your data before account termination

You can also delete individual chat agent data at any time through your dashboard.

8. Data Breaches

In the event of a data breach affecting personal data, we will:

  • Notify you without undue delay
  • Provide information about the nature of the breach
  • Describe measures taken to address the breach
  • Cooperate with your breach notification obligations

9. International Data Transfers

Our services are hosted in the United States. We use Standard Contractual Clauses and appropriate safeguards when transferring data internationally to comply with GDPR and similar regulations.

10. Contact & Questions

For questions about data processing or this DPA, contact:

This DPA is incorporated into and forms part of our Terms of Service. By using ChatifyIT, you agree to the terms of this Data Processing Addendum.