Data Processing Agreement
Version 2026-10-20-draft1 · Last updated 20 October 2026
This is a draft. It has not yet been reviewed by a lawyer and will change before launch. Items in [square brackets] are still to be filled in.
The terms on which we handle your company's data for you, our list of service providers, and what we do if something goes wrong.
1. What this covers
This agreement applies when FactoryPulse AI (the "Processor") handles personal data inside the business records that your company (the "Customer") puts into the service, for example names and contact details of your employees, customers and suppliers. The Customer decides why that data is used; we handle it only to run the service for the Customer. It forms part of the Terms of Service.
2. What we promise
- We handle the data only to provide the service, to keep it secure, to give support, and as the Customer instructs through the product or in writing.
- We keep it confidential, and only people who need it to run the service can reach it.
- We keep each company's data separate from every other company's.
- We use appropriate security measures, described in the Privacy Policy, section 10.
- We use only the service providers listed below, bound by written terms that protect the data, and we tell you before adding or replacing one that handles personal data in the Customer's records.
- We help the Customer answer requests from people about their data, and let the Customer export its data while the account is open and during the period after it ends.
- When the Customer's account ends, we remove or anonymise the data after the retention period in the Privacy Policy, unless the law requires us to keep it.
- On reasonable written request we give the Customer the information needed to check we follow this agreement.
3. What the Customer is responsible for
- Having the right to put the data into the service, and telling its own people and customers what it needs to under the law.
- Choosing who in its company can see what, using departments and permissions.
- Not putting in more personal data than it needs.
4. Service providers (sub-processors)
We name AI providers by kind and not by company because the models and providers we use change over time. We keep an up-to-date internal list and will give it to the Customer on request.
| Provider | What it does for us | Data involved |
|---|---|---|
| Supabase | Database, sign-in and file storage. Hosted in India (Mumbai). | Account details and all business records |
| Vercel | Hosts the application. | Requests and responses passing through the application; technical logs |
| Razorpay | Takes payments. | Billing contact and payment details (card and bank details go to Razorpay directly, not to us) |
| Resend | Sends emails such as invitations, billing reminders and, when you request it, Finance emails. | Recipient email address, name and the email content |
| AI providers (paid models first; free models for high-volume work or as a fallback) | Answer questions asked of the AI Assistant. | The question and the data needed to answer it. See the Privacy Policy, section 4, for how paid and free providers differ. |
| Monitoring tools (if turned on) | Find and fix errors; check the service is up. | Technical data and error details, not business records |
5. If personal data is breached
- We investigate promptly and take steps to stop and contain it.
- If it affects the Customer's data, we tell the Customer's Administrators without undue delay, and aim to do so within 72 hours of confirming it.
- Our notice says, as far as we then know: what happened, what data and which people may be affected, what we have done, and what the Customer can do.
- We help the Customer meet its own duty to tell the Data Protection Board of India and the people affected, where the law requires it.
6. Data outside India
Some providers may process data outside India. We allow this only to the extent the law allows and subject to the written terms we have with them.
7. Contact
| Company | FactoryPulse AI ([LEGAL ENTITY NAME: to be added]) |
| [SUPPORT EMAIL: to be added] | |
| Grievance Officer | [GRIEVANCE OFFICER NAME: to be added], [GRIEVANCE OFFICER EMAIL: to be added] |