Data Processing Agreement

Last Updated: July 27, 2025

This Data Processing Agreement ("DPA") is entered into between Raavue ("we," "us," or "our") and the customer using our services ("you" or "Customer").

1. Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
  • Data Controller: The entity that determines the purposes and means of processing personal data.
  • Data Processor: The entity that processes personal data on behalf of the data controller.

2. Nature and Purpose of Processing

Raavue processes personal data as a data processor on behalf of the Customer (data controller) for:

  • Providing AI-powered business intelligence services
  • Generating automated reports and insights
  • Data visualization and analytics
  • Account management and customer support
  • Service improvement and optimization

3. Categories of Data

The personal data processed may include:

  • Contact information (names, email addresses, phone numbers)
  • Business data and metrics
  • User account information
  • Usage data and analytics
  • Communication records

4. Security Measures

Raavue implements appropriate technical and organizational measures:

  • Encryption of data in transit and at rest
  • Access controls and authentication systems
  • Regular security assessments and monitoring
  • Employee training on data protection
  • Incident response procedures

5. Data Subject Rights

Raavue will assist the Customer in fulfilling data subject rights requests:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object

6. Data Retention

Personal data will be retained only as long as necessary to fulfill the purposes outlined in this DPA or as required by law. Upon termination, data will be returned or securely deleted as instructed.

7. International Transfers

Any international transfers of personal data will be conducted in accordance with applicable data protection laws with appropriate safeguards such as standard contractual clauses.

8. Breach Notification

Raavue will notify the Customer without undue delay upon becoming aware of a personal data breach, providing all relevant information and measures taken.

9. Audits and Compliance

Raavue will make available all information necessary to demonstrate compliance with this DPA and will allow for audits conducted by the Customer.

10. Contact

Questions about this DPA? Contact us at: privacy@raavue.com