This Data Processing Addendum (“DPA”) forms part of the agreement between Digital Bridge Apps (“Processor”) and the customer (“Controller”) where personal data is processed in connection with the services.
- Customer acts as Data Controller
- Digital Bridge Apps acts as Data Processor
- Processing occurs solely on documented customer instructions
- Phone numbers
- Message content and metadata
- WhatsApp identifiers and timestamps
- End-user provided data via messaging channels
- Encrypted communication (TLS / HTTPS)
- Role-based access control
- System monitoring and audit logging
- Restricted internal access on a need-to-know basis
Digital Bridge Apps may engage subprocessors (e.g., cloud hosting, payment processors) under contractual confidentiality and security obligations.
A list of subprocessors may be provided upon reasonable request.
Personal data will be retained only as long as necessary to provide services or as required by law. Upon termination, data may be deleted or returned upon request, subject to legal obligations.
This DPA is governed by the laws of the United Arab Emirates (UAE).
