Effective Date: January 1, 2026
This Data Processing Addendum ("DPA") forms part of the User Service Agreement between NEW CORE TECH CO., PTE. LTD. ("3Chat") and the entity subscribing to the 3Chat services ("Customer").
Definitions and Roles
"Controller" refers to the Customer, who determines the purposes and means of processing personal data within their 3Chat instance.
"Processor" refers to 3Chat, which processes data on behalf of the Customer.
"Agentic AI Data" refers to the unstructured text, images, and voice notes processed by 3Chat’s AI Sales Agent to execute business goals.
Processing Instructions
3Chat shall process personal data only in accordance with the Customer’s documented instructions, which include:
Executing Revenue-First sales actions as configured by the Customer.
Utilizing Model Context Protocol (MCP) to interact with Customer’s integrated business systems (e.g., CRM, Shopify).
Processing data for the specific purpose of operating the Customer’s AI Agent, and for no other purpose.
AI Safety and Model Training Commitment
No General Training: 3Chat explicitly commits that it will not use any Customer data (including knowledge bases, conversation logs, or uploaded media) to train or improve its general-purpose AI models or any third-party foundation models.
Isolated Optimization: Data is used exclusively to optimize the performance and reasoning accuracy of the Customer’s own dedicated AI Agent
Technical and Organizational Measures
3Chat implements industry-standard security measures, including:
Logical Isolation: Utilizing a multi-tenant SaaS architecture to ensure that one customer's data is never accessible to another.
Encryption: Data is encrypted both at rest and in transit using industry-standard protocols.
Access Control: Strict internal access policies ensure that only authorized 3Chat personnel can access infrastructure for troubleshooting or support purposes.
Sub-processors
Customer authorizes 3Chat to engage sub-processors to provide the service. Our primary sub-processors include:
Alibaba Cloud (Singapore): For cloud infrastructure and primary data storage.
Alibaba Cloud Qwen: For providing the underlying AI reasoning capabilities.
Stripe / Antom: For processing subscription and transaction data.
Data Subject Rights
3Chat will provide the Customer with the necessary tools to fulfill their obligations to respond to requests from data subjects (e.g., end-customers) exercising their rights under GDPR or CCPA, such as the right to access or erasure.
Data Breach Notification
In the event of a confirmed data breach, 3Chat will notify the Customer without undue delay and provide sufficient information to allow the Customer to meet their legal notification obligations.
Termination and Deletion
Upon termination of the service, 3Chat will:
Retain data for a 30-day period to allow for potential reactivation.
After 30 days, permanently delete or anonymize all Customer data from its production systems, unless otherwise required by law.
Contact Information
NEW CORE TECH CO., PTE. LTD.
143 Cecil Street, GB Building, #03-01, Singapore 069542
Email: contact@3chat.ai
