Data Processing Addendum (DPA)
This Data Processing Addendum ("DPA") governs the processing of personal data by TiffinManager (operated by ClungTech) in connection with the merchant agreements.
1. Context & Definitions
The Merchant acts as the Data Controller, and TiffinManager acts as the Data Processor. This DPA covers all subscriber records, delivery addresses, and delivery proof photos handled within the software.
2. Instructions for Processing
We process personal data only on documented instructions from the Merchant, including:
- Organizing subscriber calendars and tracking wallet credits.
- Transmitting WhatsApp status reminders and invoices.
- Configuring driver routes and stops lists.
3. Security Measures
We implement appropriate technical and organizational measures as detailed in our Security Policy, protecting data against unauthorized access, accidental alteration, or destruction.
4. Breach Notification
In the event of a security incident affecting Merchant or customer data partitions, we will notify the affected Merchant within 48 hours of confirmation, providing detailed reports on the data segments involved.
5. Subprocessors
Merchants authorize the use of subprocessors listed on our Subprocessors Page. We ensure all subprocessors adhere to equivalent data confidentiality commitments.
6. Governing Jurisdiction
This DPA and all associated processing operations are governed by the laws of Patna, Bihar, India. Courts of Patna, Bihar, India hold exclusive jurisdiction.