Data Processing Agreement
1. Who this covers
This agreement is between you (the business using NOW, the "Merchant") and [COMPANY] ("NOW"). It applies whenever NOW handles personal data of the Merchant's customers (names, phone numbers, udhaar balances, bill history), called "Customer Data". It forms part of the Terms of Use.
2. Roles
The Merchant is the data fiduciary for Customer Data. NOW is the data processor and acts only on the Merchant's instructions. The Merchant's instructions are: the actions it takes in the app, and this agreement.
3. What NOW will do
- Process Customer Data only to provide NOW, or as the law requires.
- Keep it separate for each shop, so one shop cannot see another's data.
- Make sure people at NOW who can reach it are bound to keep it confidential and only reach it when needed.
- Apply the safeguards on our Security page at /security.
- Tell the Merchant without undue delay, and within 72 hours of becoming aware, if Customer Data is breached.
- Help the Merchant answer customer requests to see, correct or delete their data. The app's Export and edit tools do most of this. We help with the rest by email.
- Delete Customer Data when the Merchant deletes the account. Backups expire within 30 days. We keep only what the law requires us to keep.
4. Sub-processors
The Merchant agrees NOW may use these providers: Cloudflare (hosting and database), Supabase (company records, which do not hold Customer Data) and Razorpay (payments). NOW is responsible for them. If we add a new provider that handles Customer Data, we tell Merchants at least 15 days before. A Merchant who objects can export and delete its data.
5. Where data is kept
Customer Data may be processed in more than one country by our hosting provider. NOW will keep to the DPDP Act's rules on transfers outside India.
6. What the Merchant must do
- Have a lawful reason to record the customer's data, and tell customers what you keep and why.
- Add only data you need. Keep it accurate.
- Not use NOW to send marketing without the customer's consent.
- Keep your own login secure.
7. Checks
On reasonable notice, NOW will give the Merchant the information needed to confirm we follow this agreement. We may share our security summary instead of allowing on-site access.
8. Liability and law
Liability is as set out in the Terms of Use. Indian law applies.
Appendix A: what is processed
- Subject: running a billing, stock and udhaar book for the Merchant.
- Whose data: the Merchant's customers.
- What: customer name, phone number, udhaar balance and the bills linked to them.
- How long: until the Merchant deletes the account.
Appendix B: a notice you can show your customers
"We note down your name, phone number and what you buy or owe, to make your bills and keep your udhaar account. This is stored in NOW, a billing app. You can ask us to correct or delete your details at any time."