Data Processing Agreement (Enterprise)

This Data Processing Agreement (DPA) applies when your organization executes an enterprise order form or written agreement with Kilo that references it.

Kilo acts as a processor for personal data you control as a fleet operator — including rider, staff, and customer information processed through Kilo Business.

• We process data only to provide Kilo Business, deliver notifications, run payments you enable, and comply with law.
• You instruct us through dashboard configuration, API usage, and support requests within documented product capabilities.
• Sub-processors (hosting, email, payments, identity verification) are listed in our Privacy Policy and updated with reasonable notice.

We maintain administrative, technical, and organisational measures appropriate to courier SaaS workloads, including encryption in transit, access controls, and audit logging for sensitive operations.

We will notify you without undue delay if we become aware of a personal data breach affecting your organization's data, subject to legal requirements.

You are responsible for responding to data subjects whose data you control. Kilo provides tooling and support to export or delete data where technically feasible.

Upon contract termination, data retention follows the Privacy Policy and Billing & Subscription Policy unless a custom enterprise schedule applies.

Contact [email protected] with your company name, fleet slug, and legal contact. We will provide a countersigned DPA for Growth/enterprise arrangements.

Until a DPA is executed, the Kilo Business Privacy Policy and Terms of Service govern processing.