Data Processing Agreement

1. Definitions

This Data Processing Agreement ("DPA") governs the processing of personal data by BotDesk (operated by Pau Berenguer) on behalf of our customers in connection with our services.

2. Scope and Application

This DPA applies to all processing of personal data carried out by BotDesk when providing services to customers, in accordance with applicable data protection laws including GDPR.

3. Data Processing

BotDesk will:

  • Process personal data only in accordance with your instructions
  • Implement appropriate technical and organizational measures
  • Ensure confidentiality of personal data
  • Assist you in responding to data subject requests
  • Notify you of any data breaches without undue delay

4. Security Measures

We implement industry-standard security measures including:

  • Encryption of data at rest and in transit
  • Access controls and authentication
  • Regular security audits and assessments
  • Employee training on data protection
  • Incident response procedures

5. Sub-processors

We may engage sub-processors to assist in providing our services. We ensure all sub-processors are bound by similar data protection obligations. Current sub-processors include:

  • Cloud infrastructure providers (AWS, Google Cloud)
  • Payment processors (Stripe)
  • Analytics services
  • AI model providers (OpenAI, Anthropic, Google)

6. Data Subject Rights

We will assist you in fulfilling data subject rights requests, including access, rectification, erasure, restriction, portability, and objection to processing.

7. Data Retention and Deletion

Upon termination of services, we will delete or return all personal data as instructed by you, unless legally required to retain certain data.

8. Audits and Compliance

We will make available to you information necessary to demonstrate compliance with this DPA and allow for audits upon reasonable notice.

Contact Us

For questions about this DPA or to request a signed copy, please contact us at:

Email: dpa@botdesk.co