Data Processing Addendum
This DPA forms part of the agreement between EduSphere (Processor) and the Customer (Controller) and sets out how personal data will be processed in connection with the service. A signed PDF version is available on request from privacy@edusphere.app.
1. Definitions
"Personal Data", "Processing", "Controller", "Processor", and "Sub-processor" have the meanings given in applicable data-protection law (including the GDPR and the India DPDP Act).
2. Scope and roles
The Customer is the Controller of personal data uploaded into the service. EduSphere acts as a Processor, processing personal data only on documented instructions from the Customer.
3. Sub-processors
The Customer authorises EduSphere to engage the sub-processors listed on the Security page. EduSphere will notify Customers in advance of any new sub-processor, and Customers may object on reasonable data-protection grounds.
4. Security measures
EduSphere implements the technical and organisational measures described on the Security page, including encryption in transit and at rest, role-based access, multi-tenant isolation, audit logging, and incident response.
5. Data-subject requests
EduSphere will assist the Customer to fulfil data-subject access, correction, and deletion requests through self-serve tooling within the platform and, where needed, through engineering support.
6. Breach notification
EduSphere will notify the Customer of any confirmed personal-data breach affecting the Customer’s tenant within 72 hours of discovery, with the information needed for the Customer to meet its own regulatory notification obligations.
7. Return and deletion
On termination, the Customer may export tenant data for 30 days. Thereafter, EduSphere will delete tenant data from active systems within 30 days and from backups within 90 days, subject to legal retention requirements.
8. International transfers
Where personal data is transferred outside the country of origin, EduSphere relies on Standard Contractual Clauses or equivalent legal mechanisms.