Data Processing Authorization & Agreement

Version: v1 · Last updated: 8 July 2026

This Agreement records the terms on which Intelayer processes, on your behalf and on your instructions, the business data you connect. Under the DPDP Act, 2023, a Data Fiduciary that engages a processor must do so under a valid contract with appropriate security obligations — this is that contract. It applies for the evaluation (trial) period and for as long as you use Intelayer.

Status — provisional POC values (pre-incorporation). Operating name, address, and grievance contact below are current provisional particulars; they will be updated to the registered company details on formal incorporation. Legal review recommended before wider launch.

1. Roles

• You (the customer) are the Data Fiduciary for the connected business data and the personal data of individuals within it (your dealers, staff, customers).
• Intelayer is the Data Processor. Intelayer processes that data only to provide the Intelayer services to you and only on your documented instructions (this Agreement, your product configuration, and the connection you set up being those instructions).

2. What you authorise

You authorise Intelayer to process the connected business data of the companies you list, to provide dashboards, analytics, collections, stock, reconciliation, data-health, support, security, and related product services during the evaluation.

• Categories of data: ledgers, invoices, stock, receivables, payments and related operational fields, including any personal data of identifiable individuals contained in them.
• Categories of individuals: your dealers, salespeople, customers, and staff, as present in your records.
• Duration: the evaluation/customer relationship, until deletion or return under Section 7.

3. Your confirmations

By accepting, you confirm that:

• you are authorised to connect the listed company books to Intelayer;
• your organisation has the necessary authority and lawful basis to share any personal data in those books with Intelayer for the purposes above;
• Intelayer may act on your instructions as your processor as set out here.

4. Intelayer's obligations as processor

Intelayer will:

• process only on your instructions and only for the purposes above, and not for its own purposes; it will not sell your data or use it for advertising;
• keep the data confidential and ensure personnel authorised to process it are under confidentiality obligations;
• apply reasonable security safeguards appropriate to the data (access controls, encryption in transit, restricted and logged access, backups, monitoring);
• assist you in responding to Data Principal requests (access, correction, erasure, nomination, grievance) that reach you as fiduciary;
• notify you without undue delay on becoming aware of a personal-data breach affecting your data, with the information you need to meet your own breach obligations;
• read your books to produce your dashboards; it does not alter your accounting records.

5. Sub-processors

You give Intelayer general authorisation to engage sub-processors (for hosting, storage, backups, security, diagnostics, communication, and support). Intelayer will impose data-protection and security obligations no less protective than this Agreement on each sub-processor and remains responsible for their performance. On request, Intelayer will provide the current categories of sub-processors.

6. International transfers

Any transfer or storage of data outside India will be done only as permitted by applicable law and subject to appropriate safeguards.

7. Return and deletion

On expiry or termination, Intelayer will, at your choice, delete or return your active data within the agreed window, save for limited backup/log/legal records retained for a bounded period and then deleted, as described in the Privacy Notice.

8. Precedence and changes

This Agreement governs the processing of personal data and supplements the Terms of Use and Privacy Notice. If there is a conflict about processing of personal data, this Agreement prevails. Material changes will be made visible before they take effect and, where required, re-accepted.

9. Contact

Data-protection queries and grievances: privacy@intelayer.in (Grievance Officer, Intelayer, 80, Jawahar Nagar Colony, Bhelupur, Varanasi, India).