Data Processing Agreement

1. Background and Scope

This Data Processing Agreement constitutes a legally binding contract between FlowRadiant (the “Data Processor”) and you (the “Data Controller”). It governs the processing of end-customer data that you upload into our platform, including names, emails, addresses, and invoice histories.

2. Processor Obligations

As a B2B platform, FlowRadiant agrees to process personal data strictly on behalf of the Data Controller and solely for the purpose of providing the invoicing and client management services outlined in the Terms of Service.

3. Security Measures

We implement robust technical and organizational security measures to protect end-customer data against unauthorized or unlawful processing, accidental loss, destruction, or damage. This includes AES-256 encryption at rest and TLS 1.3 in transit.

4. Sub-processors

You authorize us to use sub-processors (such as cloud hosting providers and payment gateways) to deliver our service. We ensure that all sub-processors are bound by data protection obligations equivalent to those in this agreement.

5. Data Breach Notification

In the event of a security breach involving your end-customer data, we will notify you without undue delay (and in any event within 48 hours of becoming aware of it) to allow you to meet your own regulatory notification obligations.

6. Contact

For DPA inquiries, contact our Data Protection Officer at privacy@flowradiant.in.