Data Processing Agreement

Version: 1.0

Publication date: September 9, 2026

1. Purpose

This Agreement governs the processing of personal data that the Customer entrusts to Ijoba through use of the Platform.

2. Roles

With respect to personal data entered by the Customer for its own purposes, the Customer acts as the data controller where applicable and Ijoba acts as the processor.

3. Instructions

Ijoba will process data only to provide, maintain, protect and improve the contracted services and in accordance with the Customer's documented instructions where compatible with the service and applicable law.

4. Customer Responsibilities

The Customer is responsible for determining processing purposes and legal bases, informing data subjects where required and using the Platform in compliance with applicable law.

5. Ijoba Responsibilities

Ijoba will implement reasonable technical and organizational measures to protect data processed through the Platform.

Authorized personnel with access to data will be subject to appropriate confidentiality obligations.

6. Internal Access

Access by authorized Ijoba personnel will be limited to what is reasonably necessary for support, security, maintenance, incident resolution, legal compliance or service operation.

7. Subprocessors

Ijoba may use subprocessors to provide infrastructure, storage, communications, security and other components of the service.

Ijoba will seek to ensure that such providers are subject to appropriate protection and confidentiality obligations.

8. International Transfers

Where processing involves international transfers, Ijoba will implement the measures required by applicable law.

9. Security

Ijoba will maintain reasonable technical and organizational measures taking into account the nature of the processing and associated risks.

10. Security Incidents

Where Ijoba becomes aware of a security incident materially affecting Customer Data, it will make reasonable efforts to notify the Customer without undue delay and provide available information relevant to assessing the incident.

11. Data Subject Rights

Ijoba will provide reasonable assistance to the Customer where necessary to respond to data subject requests, taking into account the nature of the available services.

12. Deletion and Return

Following termination of the service, Customer Data may be exported or deleted in accordance with available functionality, retention policies and applicable legal obligations.

13. Audits

Where reasonably necessary and permitted by applicable law, Ijoba may provide available information regarding its security and processing measures.

14. Duration

This Agreement remains effective while Ijoba processes personal data on behalf of the Customer.

15. Precedence

In the event of a conflict between this Agreement and other terms regarding personal data processing, the specific provisions of this Agreement will prevail to the extent of the conflict.