Data Processing Agreement

This Data Processing Agreement ("DPA") is entered into between Raavue ("we," "us," or "our") and the customer using our services ("you" or "Customer").

1. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.
• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• Data Controller: The entity that determines the purposes and means of processing personal data.
• Data Processor: The entity that processes personal data on behalf of the data controller.

2. Nature and Purpose of Processing

Raavue processes personal data as a data processor on behalf of the Customer (data controller) for the following purposes:

• Providing AI-powered business intelligence services
• Generating automated reports and insights
• Data visualization and analytics
• Account management and customer support
• Service improvement and optimization

3. Categories of Data

The personal data processed may include:

• Contact information (names, email addresses, phone numbers)
• Business data and metrics
• User account information
• Usage data and analytics
• Communication records

4. Security Measures

Raavue implements appropriate technical and organizational measures to ensure the security of personal data:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

5. Data Subject Rights

Raavue will assist the Customer in fulfilling data subject rights requests, including:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object

6. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes outlined in this DPA or as required by applicable law. Upon termination of services, data will be returned or securely deleted as instructed by the Customer.

7. International Transfers

Any international transfers of personal data will be conducted in accordance with applicable data protection laws and will include appropriate safeguards such as standard contractual clauses or adequacy decisions.

8. Breach Notification

Raavue will notify the Customer without undue delay upon becoming aware of a personal data breach, providing all relevant information about the breach and the measures taken to address it.

9. Audits and Compliance

Raavue will make available to the Customer all information necessary to demonstrate compliance with this DPA and will allow for and contribute to audits conducted by the Customer or an auditor mandated by the Customer.

10. Contact Information

For any questions or concerns regarding this Data Processing Agreement, please contact us:

Last updated: 10/31/2025