Data Processing Agreement
v1.0 · Last updated 2026-06-10
This DPA forms part of the Terms and governs ZAFROI’s processing of personal data on your behalf as your processor.
1. Roles
You are the data controller; ZAFROI is the processor acting on your documented instructions.
2. Processing scope
We process personal data only to provide the service and as instructed, for the duration of your subscription.
3. Sub-processors
We use vetted sub-processors (hosting, communications) and remain responsible for their compliance.
4. Data subject requests
We provide tooling to fulfil access, export, and erasure requests, and assist you in meeting your obligations.
5. Security & breach
We maintain appropriate technical and organizational measures and will notify you of personal-data breaches without undue delay.
This document mirrors the platform’s consent version (v1.0). Placeholder content — review by legal counsel required before launch.