Data Processing Agreement

1. Parties and roles

This agreement is between the agency that signs up (the "Organisation") and ANTARIUS IS PTE. LTD. (UEN 200506881D), Singapore ("Antarius", "we", "us").

Under Singapore's Personal Data Protection Act 2012 (PDPA), the Organisation controls its leads' personal data, and Antarius is its data intermediary ("processor").

2. What we process, and only on your instructions

Leads' WhatsApp messages, names, phone numbers and the details your setup asks for, to answer leads, hand them to your team, and show your inbox and reports.

We process the data only to run the service for you, and as your settings and instructions say.

3. Security

Each agency's data is kept apart from every other agency's (row-level security). Data is encrypted in transit and at rest. Staff sign in with two-factor authentication.

Only the people who run the service can reach the data, and only when they need to.

4. Sub-processors

We use the sub-processors listed in our Privacy notice. We give each one duties that protect the data at least as well as this agreement. We tell you before we add a new one, and you may object.

5. Data breaches

If we find a data breach that affects your data, we tell you without undue delay, and within 24 hours of confirming it, with the facts you need to assess it and to notify the PDPC and the people affected.

6. Help with requests

We help you answer access and correction requests from your leads, and we help with any questions from the PDPC.

7. When the service ends

When you leave, we return or delete your data, as you choose, within 30 days, unless the law needs us to keep it.

8. Law

This agreement is part of the Terms of Service and is governed by the laws of Singapore.