Data Processing Addendum

This DPA forms part of the Terms between you ("Customer", the controller) and TechX Startup Corp ("Blyzaa", the processor) for personal data in contact lists, inbox messages and other end-user data you upload or connect.

1. Processing

Blyzaa processes contact data only on your documented instructions (sending campaigns, automations, analytics) and for no other purpose. Subject matter: email/SMS marketing and social publishing. Duration: the term of your subscription.

2. Your obligations

You warrant you have a lawful basis and the required consents (CASL, CAN-SPAM, GDPR) for every contact, and that you will honour unsubscribe requests, which Blyzaa enforces automatically.

3. Sub-processors

Listed in the Privacy Policy. We give 14 days' notice of changes; you may object and terminate.

4. Security and breach notice

Appropriate technical and organisational measures; notification of a personal-data breach affecting your data without undue delay and within 72 hours of confirmation.

5. Assistance and audits

We assist with data-subject requests and impact assessments and provide reasonable information to demonstrate compliance once per year on request.

6. Deletion

On termination we delete or return your contact data within 90 days unless law requires retention.