Legal

Data Processing Agreement

Our Data Processing Agreement (DPA) outlines how UBXR.app processes data on behalf of our customers, in compliance with PIPEDA and applicable privacy legislation.

Key Commitments

  • Data processed only as instructed by the customer
  • All processing within Canadian borders (AWS ca-central-1)
  • Encryption at rest and in transit
  • Breach notification within 72 hours
  • Data deletion upon contract termination

Full DPA available for enterprise customers. Contact sales@ubxr.ca to request a copy. Last updated: February 2026.