Legal
Data Processing Agreement
Effective
This page summarizes the data processing agreement we sign with clients. The executed copy is the version that binds; this summary exists so procurement can review the terms before asking. To receive a signature-ready copy, email uday.kang@martechs.io.
1. Parties and roles
The client is the data controller. Martechs OPC Private Limited is the processor. Where Indian law applies, the equivalent terms are data fiduciary and data processor.
2. Scope and purpose
Processing is limited to delivering the services in the order form: list building, enrichment, outreach, qualification, and reporting. Client program data is never used for any other client or purpose.
3. Data categories
Business contact data of prospects: name, role, company, work email, work phone, engagement history, and call recordings where qualification calls are recorded. No special categories of data are processed.
4. Instructions and confidentiality
We process only on documented client instructions, with the signed program specification as the standing instruction. Everyone with access is bound by confidentiality obligations.
5. Security
Encryption in transit and at rest, least-privilege access to program data, secrets kept out of code and logs, and signed data processing terms with vendors.
6. Subprocessors
Standing vendors are covered by general authorization through the published subprocessor list, with notice before changes. Project-based vendors, such as data providers and sending tools contracted for one engagement, are named in the order form or program specification, and naming them there counts as the client's approval.
7. Data subject requests
Opt-outs, access, and deletion requests that reach us are forwarded to the client promptly, and we assist with fulfilment. Opt-outs are also applied on our side immediately and added to the cross-program suppression list.
8. Breach notice
We notify the client without undue delay after becoming aware of a breach affecting their program data, with what we know, what we are doing, and a named contact.
9. International transfers
We operate from India and run programs into the United States and Canada. Storage locations follow the subprocessor list. Where the law requires it, transfers rely on standard contractual clauses or an equivalent safeguard.
10. Return and deletion
At engagement end, program data is returned in a usable export and then deleted from our systems, except what law requires us to keep.
11. Audits
We answer written security questionnaires and provide this agreement, the subprocessor list, and policy summaries. Further audit steps can be agreed in the service agreement.
12. Governing law
The agreement follows the master service agreement. Governing law and venue match our Terms: the laws of India, with the courts of Pune, Maharashtra.
13. Contact
Martechs OPC Private Limited, Office 77, World Trade Center Tower 1, Pune 411014, Maharashtra, India. Email uday.kang@martechs.io.