Data Processing Agreement
Last updated 1 November 2026
This agreement applies when BitpointX handles personal information on behalf of an agency inside the platform. It supports agencies' obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. Roles
The agency controls the personal information in its workspace. BitpointX Pty Ltd (ABN 32 651 179 618) handles it on the agency's behalf, only on the agency's instructions, including these terms and the agency's settings in the platform.
2. What we handle
| Item | Details |
|---|---|
| People | Agency staff, agency clients and their users |
| Data | Names, contact details, tickets, messages, files, time records, sign in data |
| Purpose | Providing the BitpointX platform and support |
| Duration | The life of the subscription, plus the time needed to export data |
3. Our commitments
- Staff with access are bound by confidentiality.
- Appropriate technical and organisational security measures, described in our trust centre.
- Help with access and correction requests, security questions and data breach assessments.
- Tell the agency within 48 hours of becoming aware of a data breach affecting its workspace, so it can meet its Notifiable Data Breaches obligations.
- Delete or return personal information at the end of the service, unless the law requires us to keep it.
- Give reasonable information to show we meet this agreement.
4. Service providers
The agency agrees to us using the providers below. We give at least 30 days' notice of any new provider, and the agency may object.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Website and platform hosting | Sydney, Australia |
| Anthropic | AI answers and suggestions (Claude) | United States |
| Stripe | Subscription payments | Australia and United States |
| Brevo | Waiting list and emails | European Union |
| Website analytics, only with your consent | United States | |
| Ad measurement, only with your consent | United States and Ireland |
5. Overseas disclosure
Platform data is hosted in Sydney, Australia. Where a provider handles data overseas, we take reasonable steps under Australian Privacy Principle 8 to make sure it is protected to the same standard.
6. Requesting a signed copy
Email support@bitpointx.ai for a countersigned copy for your records.