Data Processing Agreement (DPA)

This DPA applies where a business customer ("tenant") uses Boka to process personal data of its own customers. The tenant is the data controller and Techclave is the processor, acting on the tenant's documented instructions.

• Subject matter: providing the Boka AI front-desk service — customer conversations, sales and lead capture, product orders, and bookings.
• Duration: for the term of the tenant's subscription.
• Data subjects: the tenant's customers and staff.
• Data types: contact details, conversation/message content, sales and lead data, product orders and purchase history, bookings, and related metadata. Tenants must not submit special-category data (e.g. health) unless separately agreed in writing.

• Process only on the controller's instructions and applicable law.
• Ensure personnel are bound by confidentiality.
• Apply appropriate technical and organizational security measures.
• Assist with data-subject requests and with security, breach, and impact-assessment duties.
• Notify the controller without undue delay after becoming aware of a personal-data breach.
• Delete or return personal data at the end of the service, subject to legal retention.

The controller authorizes Techclave to use the sub-processors listed at /sub-processors. We impose data-protection terms on each and remain responsible for their performance. We will give notice of intended changes so the controller can object.

Where personal data is transferred outside the EEA/UK, the parties rely on appropriate safeguards such as the Standard Contractual Clauses (and the UK Addendum/IDTA where relevant).

To countersign this DPA for your organization, contact legal@techclave.cloud. This page reflects our standard terms and will be superseded by any signed agreement between the parties.