Data Processing Addendum
How we process your customers’ personal data on your behalf.
The operator has not finished entering company details; bracketed fields will be filled before launch.
Roles
For personal data of your store’s customers, you are the data fiduciary and [to be set] is your data processor under the DPDP Act, 2023.
What we do
- Process customer, order and address data only on your documented instructions (using the platform) and to provide the service.
- Keep the data confidential and logically isolated from other merchants.
- Use appropriate security safeguards, and tell you without undue delay of any personal data breach affecting your data.
- Engage sub-processors (Supabase, hosting, Razorpay, email, courier integrations you enable) under written terms with equivalent protections.
- Help you respond to rights requests (the dashboard provides export and erasure tools).
- Delete or return your data when you close the account, subject to law.
Your responsibilities
You must have a lawful basis and notice for the data you collect, and instruct us only in lawful ways.