Data Processing Agreement (DPA)

Last Updated: August 25, 2026

This Data Processing Agreement ("DPA") forms part of the Terms & Conditions between Quarec Resources Pvt. Ltd. ("Data Processor") and you ("Data Controller").

1. Scope and Roles

When you use WabaCloud to manage WhatsApp conversations, you are the Data Controller of your customers' personal data. We operate as the Data Processor. Meta Platforms, Inc. acts as a sub-processor for message delivery.

2. Processing Instructions

We will only process personal data on your documented instructions (e.g., routing messages, storing chat history within our platform) to provide the WabaCloud services.

3. Security Measures

We implement industry-standard technical and organizational measures to ensure the security of personal data, including encryption in transit and at rest, and strict access controls.

4. Sub-processors

You authorize us to engage sub-processors (e.g., Meta for WhatsApp API delivery, AWS/GCP for cloud hosting). We remain responsible for our sub-processors' compliance with data protection obligations.

5. Data Subject Rights

We will assist you, insofar as possible, in fulfilling your obligation to respond to requests from your customers exercising their data protection rights (e.g., right to access or deletion).