Data Processing Agreement (DPA)
This DPA applies where Flinque Technologies Private Limited processes personal data on behalf of a customer as a processor. It supplements our Terms and forms part of the contract. This page is a plain-language summary and not legal advice. Confirm the final text with counsel before publishing.
1. Roles
The customer is the controller and Flinque is the processor for data the customer uploads or instructs us to process, such as contact lists and campaign data.
2. Scope and instructions
We process such data only on documented instructions from the customer and as needed to provide the service.
3. Security
We apply the measures described in our Security Policy and require staff to keep data confidential.
4. Sub-processors
We use sub-processors listed on our sub-processors page and require them to meet equivalent obligations. We give notice of material changes.
5. International transfers
Where data leaves its region we rely on appropriate safeguards such as standard contractual clauses. [CONFIRM: transfer regions and mechanism]
6. Assistance and audits
We assist the controller with data subject requests, breach notification and impact assessments, and make available information needed to show compliance.
7. Deletion
On termination we delete or return personal data, subject to legal retention. See our Data Retention Policy.
8. Signing
For a countersigned DPA contact [email protected].