Data Processing Agreement

1. Parties

This Data Processing Agreement ("DPA") forms part of the OkaySync Terms of Service and applies to the processing of personal data by OkaySync on behalf of its customers.

2. Roles

The customer is the data controller. OkaySync is the data processor, processing personal data on the customer's behalf and on the customer's documented instructions.

3. Processing details

- **Categories of data:** Customer names, contact details, order history, delivery addresses, and payment metadata. - **Purposes:** Providing the OkaySync platform as described in the Terms of Service. - **Duration:** For the term of the customer's subscription.

4. Sub-processors

OkaySync uses the following categories of sub-processors: cloud infrastructure, payment processing (Razorpay), and communication providers (email and WhatsApp). We ensure sub-processors are bound by equivalent data protection obligations.

5. Security measures

OkaySync implements the security measures described in our Security policy.

6. Data subject rights

OkaySync assists customers in responding to data subject requests where applicable, using the export and deletion features available in the dashboard.

7. Data return and deletion

Upon termination, OkaySync will, at the customer's choice, return or delete personal data, unless retention is required by law.

8. Contact

For DPA questions, contact privacy@okaysync.com.