ZENTRAIS DATA PROCESSING AGREEMENT (DPA)

Ver. 11/15/2026

For GDPR, CPRA, LGPD, and global compliance

Effective Date: 11/15/2026

This Data Processing Agreement ("DPA") forms part of the Terms of Service between:

Controller: Zentrais users

Processor: Zentrais, Inc.

When you use the platform, Zentrais processes personal data under the following terms:

1. PURPOSE OF PROCESSING

Zentrais processes personal data to:

  • Deliver platform functionality
  • Maintain security
  • Support user communication
  • Improve performance
  • Ensure lawful and ethical use

No processing occurs outside these purposes.

2. DATA COLLECTED

As defined in the Privacy Policy:

  • Account data
  • Device data
  • Usage logs
  • Content you create
  • Optional identity verification tokens

No unnecessary or excessive data is collected.

3. SECURITY MEASURES

We implement:

  • Encryption at rest and transit
  • Access controls
  • Zero Trust architecture
  • Regular penetration testing
  • Data minimization practices

Details are included in the Security Policy.

4. SUB-PROCESSORS

Zentrais may use sub-processors for:

  • Hosting
  • Identity verification
  • Security monitoring
  • Analytics
  • Email delivery

We perform strict privacy due diligence and maintain written agreements requiring GDPR-level protections.

5. INTERNATIONAL TRANSFERS

Transfers follow:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Additional safeguards

6. DATA SUBJECT RIGHTS

Users may request:

  • Access
  • Erasure
  • Rectification
  • Portability
  • Restriction
  • Objection

Requests:

privacy@zentrais.com

7. BREACH NOTIFICATION

Zentrais will notify affected users within 72 hours after discovering a data breach, as required by GDPR and global laws.

8. TERMINATION

Upon termination:

  • All personal data is deleted or anonymized, unless retention is legally required

9. LIABILITY

Liability is shared based on the role (Controller vs Processor) under GDPR standards.

Zentrais is built on Truth. Trust. Transparency.

This Data Processing Agreement reflects our commitment to protecting your data and complying with global privacy standards.