Last updated: April 2026
Data Processing Agreement
This Data Processing Agreement forms part of your agreement with XportStack and governs how we process personal data on your behalf.
1. Definitions
In this Data Processing Agreement, Controller means you, the XportStack customer, who determines the purposes and means of processing personal data. Processor means Doluvo Sdn Bhd, the operator of XportStack, who processes personal data on behalf of the Controller. Personal Data means any information relating to an identified or identifiable natural person as defined under the Personal Data Protection Act 2010 of Malaysia.
2. Subject Matter and Duration
This agreement governs the processing of personal data that you as the Controller upload, enter, or store within the XportStack platform. Processing takes place for the duration of your XportStack subscription and for 30 days following cancellation during which your data remains accessible.
3. Nature and Purpose of Processing
XportStack processes personal data on your behalf solely for the purpose of providing the XportStack export management service as described in the Terms of Service. This includes storing distributor contact information, processing quote and shipment data, and generating alerts and reports based on the data you provide.
4. Types of Personal Data Processed
The personal data processed through XportStack may include names and contact details of your distributor contacts and team members, business email addresses, company names and addresses, and any other personal data you choose to enter into the platform.
5. Our Obligations as Processor
We will process personal data only on your documented instructions as set out in these terms and your subscription agreement. We will ensure that persons authorised to process the personal data are bound by appropriate confidentiality obligations. We will implement appropriate technical and organisational security measures to protect the personal data against unauthorised access, loss, or destruction. We will notify you without undue delay if we become aware of a personal data breach affecting your data. We will delete or return all personal data upon termination of the agreement at your request. We will make available all information necessary to demonstrate compliance with this agreement.
6. Sub-Processors
We use the following sub-processors to provide the XportStack service. Supabase for database hosting and storage. Vercel for application hosting. By accepting these terms you consent to the use of these sub-processors. We will notify you of any changes to our sub-processor list by updating this page and sending an email notification.
7. Data Subject Rights
If you receive a request from one of your distributor contacts or team members to exercise their rights under applicable data protection law, please forward the request to privacy@xportstack.com. We will assist you in responding to the request within the timeframes required by applicable law.
8. Governing Law
This Data Processing Agreement is governed by the laws of Malaysia and is subject to the jurisdiction of the Malaysian courts.
9. Contact
For questions about this Data Processing Agreement contact privacy@xportstack.com.