Data processing agreement

This agreement applies when Kodre processes your clients' personal data on your behalf. It forms part of the Terms of service.

Roles

You are the controller of your clients' data. OctaveDev (Kodre) is the processor and acts only on your documented instructions, which are given by how you use the product.

Our commitments

• Process client data only to provide Kodre to you.
• Keep it confidential and limit staff access to what support requires. Every staff access to your studio is recorded in your audit log.
• Protect it with encryption in transit, access controls and tenant isolation testing.
• Use only the sub-processors listed in our Privacy policy, and tell you before adding new ones.
• Notify you without undue delay, and within 72 hours, of a personal data breach affecting your clients.
• Help you answer client requests to access, correct or erase their data.
• Delete client data when you delete your studio, except records the law requires to be kept.

International transfers

Some sub-processors operate outside Nigeria. Transfers rely on adequacy decisions or standard contractual safeguards as the NDPA and GDPR allow.