Data Processing Agreement

This page summarises the DPA that supplements our Terms and applies where ACN 699 263 057 Pty Ltd (ABN 77 699 263 057), of Australia ("Processor"), processes personal data on behalf of a customer ("Controller") in connection with Smart Quote AI.

1. Subject matter

Provision of the Smart Quote AI SaaS to the Controller.

2. Duration

For the term of the Controller's subscription and for up to 90 days after termination, after which personal data is deleted or returned on request.

3. Nature and purpose of processing

Hosting, storage, transmission, analysis, and AI-assisted generation of content strictly to provide the Service.

4. Categories of data subjects

Controller's staff, contractors, and end-customers whose details the Controller uploads or syncs (e.g. via Xero).

5. Categories of personal data

Names, business contact details, addresses, job/quote content, and any other personal data the Controller chooses to input.

6. Sub-processors

See the table below. We give 30 days' notice of new sub-processors and the Controller may object on reasonable grounds.

7. Security

We maintain appropriate technical and organisational measures including encryption in transit and at rest, least-privilege access, row-level security, audit logging, and incident-response procedures.

8. International transfers

Transfers outside the EEA / UK rely on adequacy decisions or SCCs (EU 2021/914) and, where required, the UK IDTA / Addendum.

9. Data-subject requests and breach notification

We assist the Controller in responding to data-subject requests and notify the Controller of any personal-data breach without undue delay (and within 72 hours where feasible).

10. Audits

We provide, on request and subject to confidentiality, our latest security documentation and answers to reasonable audit questionnaires.

Subprocessors

Request a countersigned DPA

Email support@smart-quote.com with your legal-entity details and we'll return a countersigned copy.