Skip to content
Skip to content

It is the contract that sets out how we process your clients' data on your behalf, it forms part of the Terms of Service you accept when you create your account, and you can read, save or print it at any time.

The addendum names you as the Data Fiduciary and us as your Data Processor. You decide what to collect, from whom, for what purpose and for how long. We process the data only on your behalf. The law requires a contract between a fiduciary and its processor (DPDP Act, section 8(2)). Our guide explains what such an agreement must cover.

You accept the addendum with the Terms of Service when you create your account. A colleague accepts it when they accept an invitation. No separate signature is needed. The full text is at the Data Processing Addendum, where you can save or print it for your records.

  • ✓Covered: the documents your clients upload or fetch, the details they type in, and the names, mobile numbers and email addresses you enter for them.
  • ✗Not covered: your own account data, such as your members' names and emails, sign-in records and billing details. Our Privacy Policy covers that data.

The addendum covers our part as your processor. Your duties as the fiduciary stay with you.

PartWhat it says
InstructionsThe application is the instruction. Creating a request, sending a link, viewing a document and deleting data are each an instruction we carry out. Anything else is written to us.
PurposeWe use your clients' data only for the purpose in your notice and to run the application for you. We never use it for a purpose of our own.
ConfidentialityWe do not read your documents. The addendum names the few cases in which we may.
SecurityThe safeguards in force are listed in the addendum. How your client's data is protected describes them in general terms.
Sub-processorsThe addendum lists the providers we use and what each does. A change to one that holds your data at rest is emailed to your admins at least 7 days before the move.
LocationYour clients' data is stored in India. The addendum names the one category of data that is processed elsewhere.
Deletion and returnData is deleted when the period you set ends, or sooner if you delete it. You can export everything from Settings at any time.
ChangesA change that materially affects you is emailed to your admins at least 30 days before it takes effect.

Questions about the addendum go to [email protected].