Data Processing Addendum

1. Scope

This Data Processing Addendum ("DPA") forms part of the Terms of Service between Dynasty Technologies Pvt. Limited ("Processor") and the Customer ("Controller"). It applies to personal data in Customer Data that we process for the Customer through Dynasty Infinity.

2. Details of processing

• Subject matter and purpose: providing the Service (receiving, storing, displaying and sending messages; contacts, deals, broadcasts, automations, reports and optional AI features).
• Duration: the term of the agreement, plus the retention periods in the Privacy Policy.
• Data subjects: the Customer's customers, leads and contacts, and the Customer's members.
• Personal data: names, phone numbers, messaging IDs, email addresses, message content and media, notes, tags, deal information and other data the Customer chooses to store.

3. Our obligations

• Process personal data only on the Customer's documented instructions, including these Terms and the Customer's settings in the Service.
• Ensure our staff are bound by confidentiality.
• Apply appropriate technical and organisational measures (see our Security page).
• Help the Customer respond to data subject requests and with security and impact assessments, as reasonably needed.
• Notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer Data.
• At the end of the Service, delete or return Customer Data as the Customer chooses, unless the law requires us to keep it.
• Make available information needed to show compliance with this DPA.

4. Sub-processors

The Customer authorises us to use sub-processors for hosting, database, email delivery and, when the AI add-on is on, AI processing. Meta processes messages as the provider of the messaging platform under its own terms with the Customer. We will give notice of new sub-processors, and the Customer may object on reasonable grounds.

5. International transfers

Customer Data may be processed outside Pakistan. Where required, we use appropriate safeguards for those transfers.

6. The Customer's responsibilities

The Customer is responsible for the lawfulness of the data it gives us, for informing its customers, and for obtaining any consent needed, including opt-in to receive WhatsApp messages.

7. Contact

Privacy and data protection questions: support@dynastyinfinity.app. A signed copy of this DPA is available on request.