Data Processing Agreement

1. Introduction

This Data Processing Agreement ("DPA") forms part of our Terms of Service and Privacy Policy. It explains how we process your personal data in accordance with applicable data protection laws.

2. Definitions

"Personal Data" means any information relating to an identified or identifiable natural person.

"Processing" means any operation performed on personal data, whether or not by automated means.

"Data Controller" means the entity which determines the purposes and means of the processing of personal data.

"Data Processor" means the entity which processes personal data on behalf of the controller.

3. Data Processing Details

3.1 Purpose of Processing

We process your personal data for the following purposes:

• Account creation and management
• Service provision and improvement
• Communication and support
• Legal compliance
• Security and fraud prevention

3.2 Categories of Data

We process the following categories of personal data:

• Identity information (name, date of birth)
• Contact information (email, phone number)
• Account information (username, password)
• Technical data (IP address, device information)
• Usage data (activity logs, preferences)

4. Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments
• Access controls and authentication
• Data backup and recovery procedures
• Staff training on data protection

5. Sub-processors

We may engage sub-processors to assist in providing our services. Any sub-processor will be bound by written agreements that require them to provide at least the level of data protection required by this DPA.

6. Data Subject Rights

We will assist you in responding to requests from data subjects to exercise their rights under applicable data protection laws, including rights of:

• Access
• Rectification
• Erasure
• Data portability
• Objection to processing

7. Data Breach Notification

We will notify you without undue delay upon becoming aware of a personal data breach affecting your personal data, and will cooperate with you in the investigation and remediation of the breach.

8. International Data Transfers

Any transfer of personal data to countries outside the EEA will be done in accordance with applicable data protection laws and appropriate safeguards will be implemented.

9. Termination

Upon termination of services, we will delete or return all personal data as requested, unless retention is required by law.

10. Contact Information

For any questions about this DPA or our data processing activities, please contact us at:

• Email: support@doalphin.com
• Phone: +91-9960602028