Data Processing Addendum (DPA)

This Data Processing Addendum ("DPA") supplements the Reachly Terms of Service and Privacy Policy when SKYBIN AI VENTURES LLP ("Reachly," "Processor") processes personal data on behalf of a business customer ("Customer," "Controller") under applicable data protection laws (including GDPR and UK GDPR where relevant).

By using Reachly Agency or other business features (when available) or by executing an order that references this DPA, Customer agrees to this DPA. Consumer use of Reachly is governed by the Privacy Policy only.

1. Roles and scope

Customer determines the purposes and means of processing personal data contained in prompts, profiles, resumes, and outreach content submitted to Reachly. Reachly processes that data only to provide the Services at beta.reachly.in, as documented in the Terms and product documentation.

2. Processing instructions

Reachly will process personal data only on documented instructions from Customer, including configuration of the Services, unless required by law. Customer is responsible for ensuring it has a lawful basis to submit personal data and that its instructions comply with applicable law.

3. Security

Reachly implements technical and organizational measures described in our Security page, including encryption in transit, access controls, and secure development practices. Measures may be updated as the product evolves.

4. Subprocessors

Customer authorizes Reachly to engage subprocessors listed on our Subprocessors page. Reachly will impose data protection obligations on subprocessors consistent with this DPA.

5. International transfers

Where personal data is transferred outside the Customer's jurisdiction, Reachly will use appropriate safeguards such as standard contractual clauses where required.

6. Data subject requests

Reachly will assist Customer, where reasonably possible, in responding to data subject requests. Customer may contact privacy@reachly.in for assistance.

7. Breach notification

Reachly will notify Customer without undue delay after becoming aware of a personal data breach affecting Customer data, and provide information reasonably required for Customer to meet its obligations under applicable law.

8. Deletion and return

Upon termination of the Services, Reachly will delete or return personal data per the Privacy Policy and Customer account settings, subject to legal retention requirements.

9. Contact

SKYBIN AI VENTURES LLP
DPA inquiries: privacy@reachly.in