Data Processing Agreement

This Data Processing Agreement ("DPA") is entered into between the Qualifi customer ("Controller") and Stackedge, CIF ESY5818456E, Barcelona, 08026, España ("Processor"), for processing personal data in connection with the Qualifi service.

The Processor processes personal data contained in files and information the Controller uploads (deal exports, call transcripts, prospecting emails and related metadata) solely to provide Qualifi. Processing lasts for the subscription term plus the retention periods in the Privacy Policy.

Purpose: analyse sales patterns and generate calibrated commercial content for the Controller. Nature: storage, structuring, automated analysis, human review by authorised operators, deletion.

• Data subjects: Controller's prospects, customers, and staff appearing in uploaded materials
• Data types: names, emails, phone numbers, company names, conversation content, deal amounts and statuses

• Process data only on documented instructions from the Controller
• Ensure persons authorised to process data are bound by confidentiality
• Implement appropriate technical and organisational security measures
• Not use uploaded content to train models for the Processor or third parties
• Delete or return source files within 30 days after analysis delivery, and delete remaining service data within 30 days after end of services on request
• Assist the Controller with data subject requests and DPIAs where relevant
• Notify the Controller without undue delay after becoming aware of a personal data breach

The Controller authorises the Processor to use hosting, email, payment and AI analysis subprocessors bound by equivalent data-protection obligations. An up-to-date list is available on request at hello@stackedge.ai.

Transfers outside the EEA rely on Standard Contractual Clauses or other lawful transfer mechanisms.

This DPA is governed by Spanish law. It forms part of the Qualifi Terms of service.