Data Processing Terms

1. Roles

These terms apply where we process personal data contained in Customer Data on your behalf. You are the party that determines the purpose and means of that processing (a "Data Fiduciary" under the DPDP Act); we are your processor. They form part of the Terms of Service.

2. Your responsibilities

You are responsible for the lawfulness of the personal data you put into the Service: for giving notices to, and obtaining valid consents from, your customers, leads, employees and vendors; for the accuracy of the data; for responding to their requests; and for your own compliance with data protection law. You must not put into the Service data you have no right to process.

3. Our commitments

• We process that personal data only to provide the Service and on your documented instructions, which these terms and your use of the Service constitute, unless the law requires otherwise.

• We keep it confidential, and ensure that our personnel with access are bound to confidentiality.

• We apply reasonable security measures appropriate to the risk, and keep each customer's data logically separate.

• We use sub-processors (hosting, storage, messaging, payments and similar) under contracts that require them to protect the data, and remain responsible for them.

• We will notify you without undue delay on becoming aware of a personal data breach affecting your data, and give reasonable assistance for you to meet your obligations.

• We will give reasonable assistance with requests from individuals and with enquiries from authorities, at your cost where the effort is significant.

• On termination we will delete or return the data as described in the Terms, except what the law requires us to keep.

4. Limits

Our liability under these terms is subject to the limits in the Terms of Service. You will indemnify us against claims and penalties arising from your instructions or from your failure to meet your own obligations as the party responsible for the data.