Parties and roles
The customer is the party determining the purpose and means of customer-controlled contact and messaging data; Vayqube processes that data for Vayreach on documented instructions. Each party remains responsible for its independent legal duties.
Processing details
Subject matter: operating the customer’s Vayreach workspace. Duration: the service term plus approved return, deletion, backup and legal-preservation periods. Nature and purpose: hosting, organising, transmitting, securing, supporting and deleting data needed for campaigns, inboxes, contacts, templates, automations and reporting.
Data subjects and categories
Data subjects may include customer personnel, leads, purchasers, service users and message recipients. Data may include identifiers, phone numbers, contact attributes, message content and metadata, consent records, suppression status, campaign and template data, support records and security logs. Customers must not submit data prohibited by law or contract.
Instructions and confidentiality
Vayqube will process customer data only on documented lawful instructions, including the agreement and configured use, unless law requires otherwise. Personnel authorised to process such data must be subject to confidentiality obligations.
Security measures
Production annex controls for identity and access management, tenant isolation, encryption, secrets, logging, backup, vulnerability management, webhook validation, incident response and deletion must be verified before this DPA is executed. No certification or audit report is promised by this draft.
Subprocessors and transfers
Vayqube may use only disclosed, contracted subprocessors appropriate to the service. Production providers, regions, change notice and objection procedure remain launch blockers. Cross-border processing must be documented and follow applicable restrictions.
Assistance and incidents
Taking account of the processing and information available, Vayqube will reasonably assist with rights requests, security assessments and legally required notifications. Incident notice will be provided without undue delay consistent with law and actual operational capability; this draft does not invent a fixed contractual hour count.
Audit, requests and deletion
Vayqube will provide reasonable information needed to demonstrate agreed processing obligations, subject to confidentiality, security and proportionate audit procedures. Government requests will be reviewed for legal validity where permitted. On termination, data will be returned or deleted under the approved schedule unless retention is legally required.
Liability and precedence
The main agreement’s approved liability terms will apply to this DPA. If processing terms conflict, this DPA should control for the relevant processing. Liability, audit costs and order-of-precedence language require counsel approval.
Contact
Vayqube Technologies Private Limited, T3b 604-606, Nx-one Techzone-4, Greater Noida, Gautam Buddha Nagar, Gautam Budh Nagar 201318, India. Email: support@vayreach.com. Phone: +91 8796955128.