Data processing addendum

1. Instructions

We process personal data only to provide the service as you configure it (which companies, reports and people), and on your documented instructions, unless the law requires otherwise, in which case we'll tell you first where allowed.

2. Confidentiality

People at the Processor who can access your data are bound to confidentiality and access it only when needed to run or support the service.

3. Security measures

• Encryption in transit (TLS) for the web, the API and the Tally connector.
• The connector is outbound-only and read-only: it relays Tally export requests and refuses anything that would write.
• Separation of each business's data; role-based access; sign-in codes and tokens stored only as hashes; rate limits; an activity log of setup changes.
• Daily database backups, copied to private storage off the application server (encrypted at rest by the storage provider), rotated out within 8 weeks.

4. Sub-processors

You authorise the sub-processors listed below. We'll give owners 30 days' notice by email before adding or replacing one; you may object, and if we can't resolve it you may end the service with a pro-rata refund of prepaid fees.

• Our cloud hosting provider: runs the application and database.
• Cloudflare R2: stores generated report files (PDF, Excel).
• Google (Gemini API): the AI model that reads questions and report results.
• OpenRouter and the model provider it routes to (e.g. Anthropic): the optional premium AI model.
• Meta (WhatsApp Business Platform): delivers WhatsApp questions and answers.
• Razorpay: payments and subscriptions.
• Our email delivery provider: account emails (sign-in codes, invitations).
• Sentry, when error reporting is switched on: error reports, without request bodies or personal data.

5. Personal data breaches

We'll notify the account owners without undue delay, and within 72 hours of becoming aware of a breach affecting your data, with what we know and what we're doing, so you can meet your own duties to the Data Protection Board and affected people.

6. Assistance

We'll help you answer requests from people exercising their rights, and with reasonable information for your compliance.

7. Deletion and return

An owner can delete the organisation and its data at any time from Settings. At the end of the service we delete your data from the live service at once and from backups within 8 weeks, except records we must keep by law (such as invoices). Report files can be downloaded before deleting.

8. Audits

We'll provide information reasonably needed to show compliance with this addendum. Contact: hello@tegain.com or +91 8848 006 882.