Data Processing Addendum
This is a standard template pending review by our legal counsel. It describes our intended practice, not a final, reviewed legal document — contact us before relying on it for a compliance decision.
1. Roles
Where your organization uses promptCRM to process personal data of your prospects and customers, you act as the data controller and Globalion Technology Solutions Pvt. Ltd. acts as the data processor.
2. Scope of processing
We process personal data only as needed to provide the promptCRM service — storing, indexing and making it available to your authorized users, and (where enabled) processing it through AI features under the approval controls you configure.
3. Subprocessors
We use infrastructure and service providers to operate promptCRM. A current list is available on request while our formal subprocessor register is finalized.
4. Security measures
Data in transit is encrypted (TLS). Access to customer data is restricted to authenticated accounts within your own workspace. Ask our team for current details on encryption at rest, backup and access-control practices for your account.
5. Assistance
We'll assist you in responding to data subject requests and regulatory inquiries relating to data processed through promptCRM, to the extent required by applicable law.
6. Requesting a signed DPA
Enterprise customers with specific DPA requirements should contact our team — this page describes our intended terms pending a fully executed, counter-signed agreement.