Data Processing Agreement (DPA)

Effective Date: June 2025

1. Parties

This Data Processing Agreement ("Agreement") is entered into between SkyL4rk (Pty) Ltd ("Processor") and any Client using its services ("Controller").

2. Purpose

The Processor shall process personal data on behalf of the Controller for the purpose of delivering SaaS, API, and license management services.

3. Data Categories

• Identification data: names, email addresses
• Client business and billing data
• Access logs and IP addresses

4. Obligations of the Processor

• Only process data on documented instructions
• Maintain confidentiality
• Implement appropriate security measures
• Assist with access or erasure requests
• Notify the Controller of data breaches without undue delay

5. Sub-Processing

Processor may use sub-processors such as cloud or analytics providers. A list is available upon request.

6. Termination

Upon termination, the Processor will delete or return all personal data unless legal obligations require continued retention.