This Data Processing Agreement ("DPA") forms part of the Terms of Service or other written or electronic agreement between GrowDM.ai ("Data Processor") and the customer ("Data Controller") for the purchase of online services from GrowDM.ai.

This DPA reflects the parties' agreement with regard to the processing of personal data in accordance with applicable data privacy laws, including the GDPR and the Indian Digital Personal Data Protection Act (DPDP Act).

1. Definitions

"Applicable Law" means all laws, regulations, and other legal requirements applicable to either party, including DPDP, GDPR, and CCPA.
"Customer Data" means any personal data that GrowDM.ai processes on behalf of the Customer via the Service.
"Sub-processor" means any third party appointed by GrowDM.ai to process personal data.

2. Processing of Personal Data

GrowDM.ai shall process Customer Data only as necessary to perform the Services, in accordance with the Customer's documented instructions, and in compliance with Applicable Law.

The Customer agrees that its use of the Services and the instructions it provides will comply with Applicable Law, and the Customer bears sole responsibility for the accuracy, quality, and legality of the Customer Data.

3. Security Measures

GrowDM.ai will implement and maintain appropriate technical and organizational security measures designed to protect Customer Data from security incidents and preserve the security and confidentiality of the Customer Data.

4. Sub-processors

The Customer grants GrowDM.ai general authorization to engage Sub-processors to process Customer Data. GrowDM.ai shall enter into a written agreement with each Sub-processor containing data protection obligations not less protective than those in this DPA.

5. Data Subject Rights

GrowDM.ai shall, to the extent legally permitted, promptly notify the Customer if it receives a request from a Data Subject to exercise their rights under Applicable Law. GrowDM.ai will assist the Customer by appropriate technical and organizational measures to fulfill these requests.

6. Data Deletion and Return

Upon termination or expiration of the Agreement, GrowDM.ai shall, at the Customer's election, delete or return all Customer Data in its possession or control, except to the extent GrowDM.ai is required by Applicable Law to retain some or all of the Customer Data.

7. Contact

For questions regarding this DPA or privacy-related matters, please contact our Data Protection Officer at:

Email: [email protected]