Data Processing Agreement (DPA)

Under Article 28 of Regulation (EU) 2016/679 (GDPR), FluxBot Studio acts as Processor when it processes your store's data on behalf of the Controller (you or your organization). Purpose: to provide the conversational assistant service and customer-support automation. Data categories: customer contact data, support messages and store metadata. Security measures: encryption in transit and at rest, role-based access controls and activity logging. Sub-processors: only those strictly necessary for the infrastructure, bound by the same confidentiality and security commitments. Deletion: we delete data as instructed by the Controller when the contractual relationship ends.