Data Processing Agreement

1. Overview

For enterprise customers operating under GDPR, PDPA, or other regional data protection regulations, BizContact offers a standard Data Processing Agreement (DPA) that defines the legal framework for how BizContact processes your organization's data as a Data Processor.

2. What BizContact's DPA Covers

• Scope and nature of data processing performed by BizContact
• Categories of personal data processed and data subjects covered
• BizContact's obligations as Data Processor (security, confidentiality, sub-processors)
• Your rights as Data Controller (audit, instructions, deletion)
• Cross-border data transfer mechanisms (SCCs where applicable)
• Breach notification procedures and timelines

3. How to Execute a DPA

Option A — Standard DPA

Review our standard DPA with your legal team, sign, and return to hi@bizcontact.net with the subject [DPA Request]. We will countersign and return the executed copy within 5 business days.

Option B — Custom DPA

If your enterprise requires modifications to the standard terms, please contact our enterprise team to discuss a customized agreement.

4. Approved Sub-Processors

BizContact uses the following sub-processors in delivering its service:

• Google Cloud Platform: Infrastructure and data storage (USA / Multi-region)
• Google (Gmail API): Email outreach functionality (USA)

BizContact will notify customers of sub-processor changes with 30 days advance notice.

5. Contact

For all data processing and compliance inquiries, email hi@bizcontact.net.