Data Processing Agreement (DPA)

Between: RentAbot ("Processor") and the subscribing Business ("Controller")

Effective: Upon acceptance in the RentAbot dashboard.

Note: This is a standard DPA template. A full legally reviewed version will be provided upon request at [email protected].

1. Subject matter and duration

RentAbot processes personal data of the Controller's clients solely to provide the booking management and Telegram bot service described in the Terms of Service, for the duration of the subscription.

2. Nature and purpose of processing

Processing includes: collection, storage, use, and deletion of client personal data (name, phone, booking history, chat messages) for the purpose of operating the booking bot on behalf of the Controller.

3. Type of personal data

Name, Telegram user ID, username, phone number, birthday, booking records, and chat messages of the Controller's clients.

4. Obligations of the Processor (RentAbot)

Process data only on documented instructions from the Controller.
Ensure persons authorised to process data are bound by confidentiality.
Implement appropriate technical and organisational security measures.
Assist the Controller in responding to Data Subject rights requests.
Delete or return all personal data upon termination of services.
Provide all information necessary to demonstrate compliance.

5. Sub-processors

RentAbot uses the following sub-processors (see Privacy Policy for details): Google LLC (Gemini AI), Telegram Messenger Inc., hosting provider. The Controller authorises their use.

6. Data retention and deletion

Retention periods are defined in the Privacy Policy. The Controller may request immediate erasure of any client's data via the RentAbot dashboard (GDPR Erase function).

7. Security

RentAbot implements encryption at rest and in transit, access controls, and regular security reviews.

8. Contact

For DPA-related enquiries: [email protected]