This DPA describes how QRecon handles personal and financial information as a service provider on behalf of our customers.
Last updated: September 2026
This Data Processing Agreement ("DPA") supplements our Terms of Service and applies where QRecon processes personal information on behalf of a customer ("Business") as a "service provider," as those terms are used under the California Consumer Privacy Act (CCPA), as amended by the CPRA, and comparable US state privacy laws.
For Personal Information contained within payout, transaction, and accounting records the Business connects to QRecon, QRecon acts as a service provider processing that information solely to provide the reconciliation Service, and not for any independent business purpose of its own.
QRecon will process Personal Information only as necessary to provide the Service, as instructed by the Business through its use of the Service's features, or as required by applicable law. QRecon will not sell or share Personal Information, and will not retain, use, or disclose it for any purpose other than providing the Service.
QRecon restricts access to Personal Information to personnel who need it to provide the Service and who are bound by confidentiality obligations.
QRecon maintains technical and organizational measures designed to protect Personal Information against unauthorized access, disclosure, alteration, or destruction, as described on our Security page.
QRecon may engage third-party sub-processors to help provide the Service. A current list is maintained on our Sub-processors page. QRecon remains responsible for its sub-processors' handling of Personal Information under obligations no less protective than those in this DPA.
Where required by applicable law, QRecon will provide reasonable assistance to the Business in responding to verified consumer requests to know, delete, or correct Personal Information processed on the Business's behalf.
Upon termination of the Service or upon written request, QRecon will delete or return Personal Information processed on the Business's behalf, except where retention is required by law.
QRecon will make available information reasonably necessary to demonstrate compliance with this DPA and will cooperate with reasonable audits or assessments requested by the Business, subject to reasonable notice and confidentiality protections.
If your organization requires a countersigned copy of this DPA for procurement or compliance purposes, email hello@qrecon.ai and we will provide one.
This page is provided as a general template for informational purposes and does not constitute legal advice. We recommend having it reviewed by qualified legal counsel before relying on it.