Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the Terms of Service between ZUDAKO INDIA ("Processor") and the Customer ("Controller" / "Data Fiduciary") and applies whenever ZUDAKO processes personal data on the Customer's behalf in connection with the Service.

1. Roles

For Customer Data routed through the Service (end-user conversations, leads, knowledge uploads), the Customer is the Data Fiduciary / Controller and ZUDAKO is the Data Processor.

2. Scope & Purpose

ZUDAKO processes personal data solely (a) to provide the Service in accordance with the Terms and Customer's documented instructions, and (b) as required by applicable law.

3. Sub-processors

Customer authorises ZUDAKO to engage sub-processors (including hosting, email, payment and WhatsApp BSP providers). A current list is available on request. ZUDAKO remains liable for sub-processors' compliance with this DPA.

4. Security

ZUDAKO implements appropriate technical and organisational measures including encryption in transit and at rest, role-based access control, audit logging, vulnerability management, and personnel training.

5. Data Subject Requests

Where ZUDAKO receives a request from an end-user, we will, without undue delay, forward the request to the Customer and assist (at the Customer's expense) in responding within applicable timeframes.

6. Incident Notification

ZUDAKO will notify the Customer without undue delay (and in any case within 72 hours) after becoming aware of a personal data breach affecting Customer Data, and will cooperate in any required notifications to the Data Protection Board of India.

7. Return & Deletion

On termination, Customer may export its data for 30 days. ZUDAKO will thereafter delete or anonymise Customer Data, except where retention is required by law.

8. Audits

ZUDAKO will make available information necessary to demonstrate compliance with this DPA and, on reasonable notice, contribute to audits conducted by the Customer or its mandated auditor, subject to confidentiality.

9. Contact

DPA-related questions: dpa@zudako.in.