Data Processing Addendum (DPA)
Last updated 2026-06-07 · For organizations: how we process personal data on your behalf.
Roles
For data you upload as a customer (e.g., your contacts you invite), you are the controller and Afrikunite is the processor. For platform operation, Afrikunite is the controller.
Processing scope
We process personal data only to provide the service and per your documented instructions, for the duration of the agreement.
Subprocessors
Supabase, Vercel, OpenAI, Stripe, Google. We require subprocessors to provide adequate protections and will notify of material changes.
International transfers
Where data is transferred internationally, appropriate safeguards (e.g., Standard Contractual Clauses) apply via our subprocessors.
Security & breach
We maintain RLS, access controls, audit logging, and abuse monitoring. We will notify you without undue delay of a personal-data breach affecting your data.
Assistance & deletion
We assist with data-subject requests and, on termination, delete or return personal data subject to legal retention.
This document is provided in good faith and may be updated. For questions, contact privacy@afrikunite.com.