Data Processing Addendum (DPA)

Last updated: July 6, 2026

This DPA applies when a merchant uses Fluxat to process personal data on behalf of their customers. Fluxat acts as a processor for merchant-controlled conversation and contact data; the merchant remains the controller.

Subject matter

Processing necessary to provide the Fluxat customer support platform, including messaging, AI-assisted replies configured by the merchant, storage, and security operations.

Categories of data

• Contact identifiers (name, email, phone, social handles as provided by channels)
• Message content and attachments
• Metadata required to route and audit conversations

Sub-processors

We use infrastructure and service providers (cloud hosting, messaging channel APIs, email delivery, AI inference providers) strictly to operate the service. A current list is available on request.

Security

We implement administrative, technical, and organizational measures appropriate to the risk, including access controls, encryption in transit, and operational monitoring.

Data subject requests

Merchants are responsible for responding to their end-users. We assist merchants within reasonable scope, including deletion workflows documented at Data Deletion.

Contact

DPA inquiries: support@fluxat.ai