Data Processing Agreement
Effective: 1 January 2026 · Version 2026-01-01
This Data Processing Agreement (“DPA”) forms part of the Terms of Use between you (the “Customer”, acting as responsible party/controller) and Prebo Digital (acting as operator/processor) where we process personal information on your behalf to provide the Adsynth platform (“Service”). It is designed to meet the requirements of POPIA (South Africa) and, where applicable, the GDPR.
1. Roles and scope
For Customer Data you submit or connect, you are the responsible party/controller and we are the operator/processor. We process personal information only on your documented instructions (including as set out in the Terms and this DPA), and for the purpose of providing and supporting the Service.
2. Our obligations
- Process personal information only on your instructions and as permitted by law.
- Ensure persons authorised to process are bound by confidentiality.
- Implement appropriate technical and organisational security measures (encryption in transit, encryption of stored credentials at rest, access controls, rate limiting).
- Assist you, taking into account the nature of processing, with data-subject requests and with your security, breach-notification, and impact-assessment obligations.
- Notify you without undue delay after becoming aware of a personal-information breach affecting your data.
- On termination, delete or return Customer Data, subject to retention required by law.
3. Subprocessors
You authorise us to engage the subprocessors below to help deliver the Service. Each is bound by data-protection terms consistent with this DPA. We will give notice of intended changes and you may object on reasonable data-protection grounds.
| Subprocessor | Purpose | Location |
|---|---|---|
| Google LLC | Google Ads API, GA4, Search Console — ad account management and analytics | USA (EU SCCs) |
| Anthropic PBC | AI model inference for chat assistant and multi-agent routing | USA |
| OpenAI Inc | Fallback AI model inference for chat assistant | USA (EU SCCs) |
| Stripe Inc | Payment processing and subscription management (legacy fallback) | USA (EU SCCs) |
| Paddle.com Market Ltd | Merchant of record — payment processing, tax/VAT, subscription billing | Ireland / USA (EU SCCs) |
| Meta Platforms Inc | Meta Ads API — ad account management (if connected) | USA (EU SCCs) |
4. International transfers
Where personal information is transferred outside South Africa or the EEA/UK, we rely on lawful transfer mechanisms (such as standard contractual clauses) and the safeguards described in our Privacy Policy.
5. Audits and requests
We will make available information reasonably necessary to demonstrate compliance with this DPA. To request a counter-signed copy of this DPA, or to discuss audit arrangements, contact info@prebodigital.co.za.