Data Processing Addendum (DPA)

This Data Processing Addendum ("DPA") forms part of RH Strategic Consulting's Terms of Use and Privacy Policy. RH Strategic Consulting, LLC ("Processor") acts as a Data Processor for clients utilizing its AI automation, analytics, and integration services. Clients ("Controllers") determine the purpose and means of processing.

RH Strategic Consulting processes personal data solely for the purposes of delivering consulting, automation, and integration services. This includes project data, user-provided inputs, and data processed via third-party integrations. RH Strategic Consulting does not sell, share, or use personal data for unrelated commercial purposes.

Authorized sub-processors include Supabase (data storage and authentication), Vercel (hosting and deployment), and OpenAI (AI inference processing). All sub-processors maintain GDPR, CCPA, and CPRA compliance.

All data is encrypted in transit via TLS 1.3 and at rest using AES-256 encryption. Access is restricted to authorized personnel with multi-factor authentication (MFA) and logged administrative actions. Systems are monitored for unauthorized access, intrusion, and data exfiltration attempts.

Clients may request access, correction, or deletion of their data. Requests are processed in accordance with applicable privacy laws and responded to within 30 days.

RH Strategic Consulting retains client data only for as long as necessary to provide contracted services or comply with legal obligations. Upon contract termination, data may be deleted or exported at the client's request.

For questions about this DPA or privacy-related matters, contact:

privacy@rhconsulting.ai

© 2026 RH Strategic Consulting, LLC | rhconsulting.ai