Data Processing Agreement

1. Roles

Customer apne end-customers ke data ka Data Fiduciary hai. AIBUTAI Data Processor hai — sirf customer ke instruction par data process karta hai.

AIBUTAI apne account data (billing, staff logins) ke liye khud fiduciary hai.

2. Scope aur purpose

Processing ka purpose: WhatsApp message bhejna, delivery status dena, wallet billing, support aur security.

Data types: contact details, message content, delivery metadata, usage logs. Duration: service period + retention policy.

3. Sub-processors

Customer ki general permission hai ki hum niche diye processors use karein. Naya processor jodne se 15 din pehle email par suchna milegi.

• Meta Platforms — WhatsApp delivery
• Razorpay — payments
• Email provider — invoices/alerts
• Cloud hosting — India region

4. Security measures

HTTPS transit, encrypted backups, role-based access, audit logging, aur monthly access review.

Processor staff sirf need-to-know basis par data dekhta hai, confidentiality bound hai.

5. Data subject requests

Customer ke end-customer ki access/delete request aane par AIBUTAI 5 working days me support karta hai — dashboard se export ya delete.

Law ke hisaab se bane records (invoice) delete nahi hote.

6. Breach notification

Kisi personal data breach ka pata chalte hi 72 ghante ke andar customer ko email aur dashboard alert jaata hai.

Notification me affected data, possible impact aur kiye gaye steps likhe hote hain.

7. Termination par data

Service band hone par customer 30 din ke andar poora data export kar sakta hai. Uske baad data delete kar diya jaata hai (invoice records chhod kar).

8. Audit rights

Saal me ek baar, 30 din ke notice par customer humari security practices ka questionnaire bhej sakta hai. On-site audit enterprise plan me.

9. International transfers

Primary storage India me hai. Meta aur email provider data apne global network par process kar sakte hain — unke standard contractual clauses lagte hain.

10. Contact

DPA se judi baat: support@aibutai.com · +91 98610 98610.