Data Processing Terms

For the data your centre records about its own customers, you are the data controller and we are the data processor. We process that data only on your documented instructions, which are given by your use of the software and this agreement.

Subject matter: providing the Smart Ledger service. Duration: while your subscription is active plus the retention period afterwards. Types of data: customer names, contact numbers, service records, transaction amounts and documents you upload. Categories of persons: your centre's customers and staff.

We will not use your data for our own purposes, will not sell it, and will not disclose it except as needed to run the service or as required by law.

Access is restricted to authorised personnel who are bound by confidentiality.

We apply encryption in transit, access-controlled storage, and row-level access rules that separate one centre's data from another's.

We use cloud hosting, database, payment and communication providers as sub-processors. Each is bound by equivalent confidentiality and security obligations. We remain responsible to you for their performance.

Service data is hosted with reputable cloud providers. Where data is processed outside India, appropriate safeguards are applied.

If we become aware of a security breach affecting your data, we will notify you without undue delay and no later than 72 hours after becoming aware, with the facts known at the time and the steps being taken.

We will help you respond to requests from your customers about their data, and will provide reasonable information to demonstrate our compliance on written request.

On termination you may export your data for 90 days, after which we delete it permanently, except where law requires us to retain records.

SRIVARMA INFOTECH, 1/151-2, West Street, Allur, Trichy, Tamil Nadu — 620 101, India

Mobile: +91 9843600565

Email: info@srivarma.in

Support hours: Monday to Saturday, 10:00 AM to 7:00 PM IST.