Data Processing Agreement
This Data Processing Agreement ("DPA") is entered into by and between:
The Client
The business entity using the NE8XT AI platform
Designated as the "Data Controller".
NE8XT
Represented by Najib, providing the AI integrations
Designated as the "Data Processor".
This agreement ensures that both parties comply with data protection regulations, specifically Moroccan Law No. 09-08, when processing customer data.
1. Definitions
- "Customer Data" means any personal data (like names, phone numbers, and chat logs) processed by NE8XT on behalf of the Client.
- "Processing" means any operation performed on personal data, such as collection, recording, storage, or transmission.
2. Scope and Instructions
NE8XT shall only process Customer Data on behalf of and in accordance with the written instructions of the Client. NE8XT will not use the Client’s customer data for any other commercial purpose.
3. Technical and Security Measures
NE8XT implements reasonable technical and organizational measures to protect Customer Data from unauthorized access, loss, or alteration. This includes securing the API endpoints (n8n, Vapi, and LLM APIs) and using industry-standard encryption.
4. Authorized Sub-Processors
The Client hereby grants NE8XT general authorization to engage the following sub-processors to deliver the service:
Meta Platforms, Inc.
For WhatsApp/Facebook message transport.
OpenAI, Anthropic, & Google LLC
For Large Language Model (LLM) processing.
Vapi
For voice agent processing.
n8n
For workflow automation.
5. Data Deletion
Upon termination of the service, or at the written request of the Client, NE8XT shall delete or return all Customer Data within [30] days, unless local laws require retention of certain records.
Back to Privacy Policy?
Review our complete privacy policy framework.