Data processing agreement

1. Roles

GetG Technology Private Limited (Plot 4, Sector 44, Minarch Tower, Gurugram, Haryana, India-122003) is the processor under this agreement.

For your leads' personal data you are the data fiduciary and we are your data processor. We process it only to provide GoKloze on your documented instructions: your settings, funnels and actions in the app and API. This agreement forms part of the Terms of service.

2. Details of processing

3. Our obligations

• Process only on your instructions and tell you if we think an instruction breaks the law.
• Make sure staff and contractors with access are bound by confidentiality.
• Apply the security measures in section 6.
• Help you answer data principals' requests (export and delete are self-service in the app).
• Help you with breach notifications and assessments the law requires.
• Delete or return the data when the service ends.

4. Sub-processors

We use hosting, database, storage, email delivery and AI providers to run GoKloze, under written terms at least as protective as this agreement. Providers you connect yourself (WhatsApp, calling, voice AI, email, ad platforms) are your own processors: we pass them data only to carry out your funnels.

We will tell you about new sub-processors in advance; you may object on reasonable data-protection grounds.

5. Transfers outside India

Where a sub-processor processes data outside India we do so only where the DPDP Act and Government notifications allow, with contractual safeguards.

6. Security measures

• Encryption in transit (TLS) and for credentials at rest.
• Workspace isolation on every request; role-based access inside each workspace.
• One-time-code sign-in, rate limits and audited, time-limited support sessions.
• Audit logs for settings, exports, deletions and admin actions.
• Backups, monitoring and least-privilege staff access.

7. Personal data breaches

We will tell you without undue delay, and in any case within 72 hours, after we become aware of a breach affecting your workspace, with what happened, the data involved, likely consequences and the steps taken.

8. Information and audits

We will give you the information reasonably needed to show compliance with this agreement, once a year or after a breach, at a mutually agreed time and without access to other customers' data.

9. End of service

After you close your workspace you have 30 days to export data. We then delete personal data, except records the law requires us to keep, such as invoices.