Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the Terms of Service and governs the processing of personal data by Sixty67 Intelligence Inc. as a processor on behalf of its customers.

Roles

• Controller: the customer (you) who determines the purposes and means of processing.
• Processor: Sixty67 Intelligence Inc., which processes personal data on behalf of the controller.
• Data Subject: the individuals whose personal data is processed (staff, vendors, guests, team members).

Data Processing Details

The Service processes personal data you enter, including staff records, vendor contacts, guest lists, and team account information, for the purpose of delivering the platform features you use.

Processor Obligations

• Process personal data only on documented instructions from the controller.
• Ensure confidentiality of personnel with access to data.
• Implement appropriate technical and organizational security measures.
• Support the controller in responding to data subject requests.
• Delete or return data on termination.

Sub-Processors

We use the following sub-processors: Base44 (infrastructure), Stripe (payments), OpenAI (AI features), and Venice AI (image generation). A full list is available on our Sub-Processors page.

International Transfers

Where data is transferred outside Canada, we use Standard Contractual Clauses (SCCs) or equivalent safeguards.

Audit Rights

Enterprise customers may audit our compliance under a non-disclosure agreement. We also provide SOC 2 reports under NDA on request.

Deletion on Termination

On termination, we delete your personal data within 30 days, except where retention is required by law.

Contact

Contact our Data Protection Officer at dpo@sixty67intelligence.com.