BINDING B2B AGREEMENT & DATA PROCESSING ADDENDUM

Terms of Service & DPA.

These terms govern your use of Clarivect and constitute a legally binding Data Processing Agreement under the EU GDPR, the California Privacy Rights Act (CPRA), and India's Digital Personal Data Protection Act, 2023.

B2B Enterprise Terms

Exclusively intended for commercial organizations, financial teams, and corporate operations.

Integrated DPA

Controller-to-Processor agreement binding immediately upon document analysis initiation.

GDPR & DPDP Controls

Automated 24-hour physical purge schedule and instant manual deletion rights.

CCPA Non-Sale

Zero selling, sharing, or behavioral advertising use of customer data.

01 /AGREEMENT SCOPE

1. Acceptance of Terms

By accessing or using the Clarivect platform, AI workflow engineering services, or the Receivables Assurance Scanner (collectively, the “Service”), you agree to be bound by these Terms of Service.

If you are using the Service on behalf of an enterprise or organization, you represent and warrant that you have the legal authority to bind that entity to these terms. The Service is strictly intended for business-to-business (B2B) use.

02 /STATUTORY ADDENDUM

2. Data Processing Agreement (DPA)

Structured in accordance with data protection principles under the EU General Data Protection Regulation (GDPR Art. 28), the California Privacy Rights Act (CPRA), and India's Digital Personal Data Protection Act, 2023 (DPDP Act), this section sets out our binding commitments:

Roles & Processing InstructionsYou (the customer) act as the Data Controller (or Data Fiduciary). Clarivect acts strictly as the Data Processor. Clarivect processes payloads exclusively on your documented instructions (e.g. uploading a file or triggering a workflow).
Data Minimization & 24-Hour ExpirySession access expires automatically after 24 hours. Scheduled cleanup routines remove expired source files and scan records. Access expiry and physical cleanup are separate steps; downloaded PDF briefs remain securely on your device.
Authorized Subprocessor Registryswipe table →
SubprocessorService FunctionData Center RegionEncryption
Supabase (PostgreSQL)Ephemeral Session & StorageAWS ap-south-1 (Mumbai)TLS 1.3 / AES-256
Dedicated Node.js RuntimeDeterministic Rule ExecutionIsolated Server / Client VPCTLS 1.3 / In-Memory
ResendTransactional Report DeliveryUS-East / EUTLS 1.3 / Zero Retention
StripeBilling & Tokenized VaultGlobal / PCI-DSS Level 1TLS 1.3 / Tokenized
Zero AI Model Training WarrantyClarivect contractually warrants that customer data, financial records, and scan findings are never used to train public or proprietary Large Language Models (LLMs). Processing is deterministic.
International Data TransfersAny cross-border data transfer between your location and our hosting subprocessors is governed by our cloud providers' enterprise data protection addenda incorporating European Commission Standard Contractual Clauses (SCCs) and equivalent international transfer safeguards.
03 /STATE PRIVACY

3. CCPA / CPRA Notice for California Residents

Under the California Consumer Privacy Act (CCPA) and the CPRA, Clarivect acts strictly as a “Service Provider.” We do not sell or share personal information, commercial customer records, or financial information for cross-context behavioral advertising. Scanner records follow the 24-hour access and deletion lifecycle described in our Privacy Policy.

04 /OPERATOR COVENANTS

4. Acceptable Use & Responsibilities

You agree not to use the Service for any unlawful purpose or to process records without authorization. You represent and warrant that you hold all necessary legal rights, customer consents, and corporate authorizations required to upload and analyze invoices, counterparty data, and accounting records within the Service.

You agree not to introduce malicious payloads, reverse engineer deterministic ruleset engines, or attempt to bypass tenant-isolation boundaries.

05 /FICTIONAL ENTITY DISCLOSURE

5. Demonstration Data & Fictional Entity Disclaimer

Any sample datasets, preview tables, demonstration reports, and screenshots provided on this website (including entities named “Acme Enterprises (Sample)”, “Meridian Systems (Sample)”, “Orion Dynamics (Sample)”, “Northstar Studio”, and related counterparties) are strictly synthetic, simulated demonstrations created for product illustration purposes.

Any resemblance to real companies, living individuals, registered trademarks, or actual commercial organizations is entirely coincidental. Clarivect does not endorse or claim affiliation with any third-party entity through illustrative preview materials.

06 /LIABILITY BOUNDARIES

6. Limitation of Liability

The Service provides deterministic receivables prioritization and policy invariant evaluations based on data provided by the user. The Service does not provide formal legal, tax, or accredited accounting advice.

To the maximum extent permitted by applicable law, Clarivect and its principals shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business goodwill, arising out of or in connection with the use of the Service.

07 /LEGAL NOTICES

7. Contact & Legal Notices

For legal inquiries, formal regulatory notices, or custom enterprise DPA counter-signatures, please contact our legal counsel and security office directly:

Clarivect Legal & Data Protection OfficeFormal notices & DPA agreements:
security@clarivect.com