DATA PROCESSING AGREEMENT
CITACHAT LLC

This Data Processing Agreement (“DPA”) forms an integral part of the Citachat Terms and Conditions.

1. Parties

Data Controller: The User of the Platform.

Data Processor: Citachat LLC.

2. Object

To regulate the processing of personal data carried out by Citachat on behalf of the User within the framework of the provision of the Service.

3. Nature and Purpose of Processing

Citachat will process personal data to:

• Operate the Platform.
• Automate communications.
• Store, process, and analyze information.
• Improve features and security.
• Comply with legal obligations.

4. Controller Instructions

Citachat will process data in accordance with the User's instructions and this DPA. The User guarantees that they have the necessary authorizations from the data subjects.

5. Citachat Obligations

Citachat commits to:

• Process data only for authorized purposes.
• Maintain confidentiality.
• Implement appropriate security measures.
• Assist the User in complying with legal obligations when reasonably possible.
• Notify relevant security incidents without undue delay.

6. Subprocessors

The User authorizes Citachat to outsource processing to third parties. Citachat will remain responsible to the User.

7. International Transfers

The User authorizes the international transfer of data necessary for the provision of the Service.

8. Duration

This DPA will remain in effect as long as Citachat processes personal data on behalf of the User.