Data Processing Addendum
Last Updated: February, 2026
This Data Processing Addendum (“DPA”) forms part of the Master Terms of Service between MeetRaya (a service of DemandHub Inc.) (“Processor”) and the entity subscribing to the Service (“Customer” or “Controller”).
Definitions
“Data Protection Laws” means all applicable laws including GDPR, CCPA, and PIPEDA.
“Personal Data” means any information relating to an identified or identifiable natural person processed by MeetRaya on behalf of Customer.
“Sub-processor” means any third party engaged by MeetRaya to process Personal Data (e.g., cloud hosting or AI model providers).
Scope of Processing
Processor shall process Personal Data only for the purposes of providing the AI Agent services and in accordance with Customer’s documented instructions. Processor is prohibited from “selling” Personal Data or using Customer Data to train foundational global machine learning models.
Processor Obligations
Confidentiality: Processor shall ensure that persons authorized to process Personal Data have committed themselves to confidentiality.
Security: Processor shall implement appropriate technical and organizational measures, including AES-256 encryption at rest, TLS 1.2+ encryption in transit, and role-based access controls.
Sub-processors: Customer provides a general authorization for Processor to engage Sub-processors. Processor shall remain fully liable for the performance of Sub-processors’ obligations.
Data Subject Rights
Processor shall, to the extent legally permitted, notify Customer if it receives a request from a Data Subject (End-User) to exercise their rights (access, deletion, etc.). Processor shall provide reasonable assistance to Customer to fulfill such requests.
Breach Notification
Processor shall notify Customer without undue delay, and in any event within 72 hours, upon becoming aware of a confirmed Personal Data Breach.
Termination & Deletion
Upon termination of the Agreement, Processor shall, at the choice of Customer,
