GDPR Compliance

1 GDPR Overview

The General Data Protection Regulation (GDPR) is a comprehensive European Union privacy law that regulates how organizations collect, handle, and secure the personal data of individuals located in the European Economic Area (EEA).

Markuzai is fully committed to compliance across all our bulk email services, WhatsApp broadcasts, and database storage modules, ensuring complete safety and control over users' personal details.

2 Controller vs Processor

Under the GDPR, roles are divided as follows:

• Data Controller: Your organization acts as the Data Controller for the lists of contacts, customer databases, and message templates you upload to our servers. You determine the consent mechanisms and content of messages.
• Data Processor: Markuzai acts as the Data Processor, handling, routing, and dispatching messages strictly according to the controller's instructions and configured integrations.

3 Your Data Rights

Markuzai supports data subject rights:

• Right to be Forgotten: You can permanently delete customer data logs and organization details directly inside the dashboard settings.
• Right to Portability: Export your uploaded contact directories and history metrics to standard CSV formats at any time.
• Right to Access: Inspect what communication logs, SMTP configurations, and tokens we hold relative to your subscription.

4 Approved Subprocessors

Markuzai uses selected third-party subprocessors to run infrastructure operations and routing. All subprocessors maintain strict security and compliance standards:

5 Contact Our Data Protection Officer (DPO)

For questions regarding data processor agreements (DPA), custom standard contractual clauses (SCCs), or data subject request fulfillment, contact our DPO: