Data Processing Agreement (DPA)
Effective Date: 01/05/2025
Between:
- Customer (“Data Controller”)
- RevGenie.ai, operated by Revgeni.ai LTD (“Data Processor”)
1. Purpose and Scope
This Data Processing Agreement governs the processing of personal data by RevGenie.ai on behalf of the Customer under UK GDPR.
2. Nature of Processing
RevGenie.ai processes personal data solely for the purpose of delivering AI-powered sales and marketing automation services.
- Types of Data: Contact details, business communication records, CRM-related data
- Data Subjects: End customers, sales prospects, marketing contacts, and Customer personnel
3. Processor Obligations
RevGenie.ai shall:
- Process data only on documented instructions from the Customer
- Ensure staff handling data are bound by confidentiality
- Implement appropriate technical and organisational measures to protect data
- Assist the Customer with data subject rights requests
- Assist with data breach notifications and impact assessments
- Delete or return all personal data upon termination (unless retention is required by law)
4. Sub-processors
RevGenie.ai may engage sub-processors such as cloud hosts, analytics tools, and payment providers. A list of current sub-processors is available upon request. We will notify the Customer of changes and provide the right to object.
5. Transfers Outside the UK/EEA
Data transfers to third countries will only occur with appropriate safeguards such as:
- Adequacy decisions
- Standard Contractual Clauses (SCCs)
- UK Addendum to SCCs
6. Security
RevGenie.ai shall implement appropriate security controls including encryption, access controls, logging, and staff training.
7. Audits
Upon reasonable request, RevGenie.ai shall provide information necessary to demonstrate compliance. The Customer may conduct audits subject to reasonable notice and confidentiality.
8. Data Breach Notification
RevGenie.ai will notify the Customer without undue delay if a personal data breach occurs that affects the Customer’s data.
9. Termination
Upon termination, RevGenie.ai will delete or return all personal data unless required to retain it by law.