Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you ("Controller") and Ektasi Technology Private Limited ("Processor") and applies where we process personal data on your behalf (such as the customer contacts you upload).

1. Roles & scope

You are the controller/Data Fiduciary and determine the purposes of processing; we are the processor/Data Processor and process personal data only to provide the Service and on your documented instructions.

2. Processor obligations

• Process personal data only on your instructions and for the Service.
• Ensure persons authorised to process are bound by confidentiality.
• Implement appropriate technical and organisational security measures (encryption in transit, access controls, logging, upload validation).
• Assist you, taking into account the nature of processing, with data‑subject requests and with security, breach and impact‑assessment obligations.
• Delete or return personal data on termination, save where retention is required by law.
• Make available information needed to demonstrate compliance and allow reasonable audits.

3. Sub‑processors

You authorise the sub‑processors listed at /subprocessors. We impose data‑protection obligations on them and remain responsible for their performance. We will give notice of changes.

4. International transfers

Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

5. Personal‑data breach

We will notify you without undue delay after becoming aware of a personal‑data breach affecting your data and provide information to help you meet your notification duties.

6. Term & contact

This DPA lasts for the duration of the Service. Contact our Grievance Officer at [email protected].