Legal
Data Processing Agreement
Last updated: September 5, 2026
This template is provided for B2B customers and requires legal review before use in binding agreements. Contact [email protected] for a customer-specific copy.
Parties
Controller: [Customer legal name and address]
Processor: Ninefold Ventures LLC, doing business as Charigent (charigent.com), PO Box 8043, Las Vegas, NV 89166, USA
1. Subject Matter and Duration
This DPA applies to processing of personal data by Charigent on behalf of the Customer as part of the Charigent platform services, for the duration of the Customer's subscription.
2. Nature and Purpose of Processing
- Provide AI-assisted content generation, chat, and automation features
- Deliver messages via connected social media platforms on Customer's behalf
- Maintain conversation history and memory for Charigent AI assistants
- Send transactional emails on behalf of the Customer
3. Data Subjects and Personal Data
Data subjects include the Customer's end users who interact with deployed Charigents and the Customer's social media followers and contacts.
Personal data may include names, contact information, conversation content, social media profile data, IP addresses, and usage analytics.
4. Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Google (Vertex AI) | AI text generation | US |
| OpenAI | AI text and image generation | US |
| Anthropic | AI text generation | US |
| Amazon Web Services (SES) | Transactional email | US |
| Stripe | Payment processing | US |
| Sentry | Error monitoring | US |
5. Processor Obligations
- Process personal data only on documented Customer instructions
- Ensure persons authorised to process data are bound by confidentiality
- Implement appropriate technical and organisational security measures
- Delete or return all personal data on request upon termination
- Notify Customer of any personal data breach within 72 hours of becoming aware
6. Data Subject Rights and Transfers
Charigent assists the Customer in fulfilling data subject requests via the account deletion flow and data export API. Data may be transferred to and processed in the United States, with Standard Contractual Clauses used for EU/EEA/UK transfers where required.