DPA

This Data Processing Addendum (DPA) describes how Kuubiik processes personal data on behalf of Companies that use the platform. It supplements our Terms of Service and is governed by Singapore's Personal Data Protection Act (PDPA).

Roles

When a Company uses Kuubiik to operate engagements, the Company and Kuubiik each process personal data. For data a Company provides about its own contacts, the Company is the controlling organisation and Kuubiik processes that data on its instructions. For engagement operations where Kuubiik acts as Contractor of Record (COR) or Employer of Record (EOR), Kuubiik determines the processing required to meet its own legal obligations.

Scope of processing

Kuubiik processes personal data only to provide the platform and operate engagements — including talent matching, contracts, KYC, payouts, and support. We follow data minimisation and do not use Company or talent personal data for unrelated purposes.

Security

We apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit, and audit logging of consequential actions.

Sub-processors

Kuubiik uses a limited set of sub-processors to deliver the service (for example, infrastructure, email, and storage providers). A current sub-processor list will be published with the final, approved DPA.

International transfers

Personal data may be processed in jurisdictions where Kuubiik or its sub-processors operate, with safeguards consistent with PDPA.

Data subject rights and retention

Kuubiik supports access, correction, export, and deletion requests, and applies retention windows that vary by jurisdiction. See our Privacy Policy for details.

This is draft content; the final, legally reviewed DPA — including the sub-processor list — will be published before launch.