Data Processing Agreement Summary
Last updated: 20 Oct 2026 · QDroid by VANIXQBIT
This page summarizes, in plain language, how QDroid (as a data processor) handles personal data on behalf of a Business Account (as the data controller for its own Customer data). It supplements our Privacy Policy. Businesses that require a formal, signed Data Processing Agreement should contact us at info@vanixqbit.com.
1. Roles
A Merchant is the controller of the Customer data collected through their Storefront (name, phone number, delivery address). QDroid acts as a processor, handling that data only to operate the Storefront and order queue on the Merchant's behalf.
2. Scope of Processing
Processing is limited to: storing catalog and order data (including the Customer's phone number, name, and delivery address), displaying it in the Merchant's dashboard, relaying order updates to the Customer by transactional SMS, and sending order notifications to the Merchant by push and SMS. QDroid does not use Customer data for any purpose beyond operating the Storefront that collected it.
3. Sub-processors
QDroid uses Supabase (database, authentication, file storage), Cloudflare (hosting, CDN), and Amazon Web Services (Amazon SNS / AWS End User Messaging for transactional SMS, and an SQS + Lambda pipeline for push-notification delivery) as infrastructure sub-processors. We do not use any other third party to process Customer or Merchant personal data at this time.
4. Security Measures
See our Security Policy for the encryption, authentication, and access-control measures applied to this data.
5. Assistance with Data Subject Requests
If a Customer contacts QDroid directly with a data access or deletion request about an order placed with a specific Merchant, we will route that request to the relevant Merchant and/or assist the Merchant in responding, consistent with our Privacy Policy.