Data processing terms
For organisations that put other people's data into KlaritiQ: who is responsible for what, and the commitments we make to you. A signed version follows incorporation.
Applies to klaritiq.in and the KlaritiQ platform
- When your organisation enters employees', vendors' or customers' details, your organisation is the data fiduciary under DPDP and KlaritiQ is its data processor.
- We process that data only to run the workspace for you, never for ourselves, and we delete it when you tell us to or when the organisation is erased.
- A signed Data Processing Agreement will be available once the company is registered. Design-partner pilots already get written terms covering the same points.
Two roles, one picture
| Question | Your organisation | KlaritiQ |
|---|---|---|
| Who decides what personal data goes in? | You | Never |
| Who gives notice to, and gets consent from, the people concerned? | You | We give you the tools (member invitations, the Privacy Notice's section for named people); the duty is yours |
| Who answers access, correction and erasure requests from those people? | You, in the product, directly | We assist where you cannot do it yourself, within 30 days |
| Who reports a breach to the Data Protection Board? | You, as fiduciary | We tell you without unreasonable delay with everything we know, so you can |
| Who chooses the sub-processors? | You accept the published list | We maintain it and give 14 days' notice of additions |
Data you enter about yourself as an account holder is different: for that, KlaritiQ is the fiduciary and the Privacy Notice applies directly.
What the signed agreement will say
Each commitment below is already how the product behaves; the agreement will make it enforceable.
| Clause | Commitment |
|---|---|
| Instructions | We process personal data only to provide the service as configured by your admins and as documented in the Privacy Notice. Any other purpose needs your written instruction. |
| Confidentiality | Our staff have no standing access to your workspace; support access is granted by you, time-boxed and logged. |
| Security | The measures on the Security page: tenant scoping on every request, immutable audit log, second-approver deletion, hashed credentials and keys, encryption in transit, provider encryption at rest. |
| Sub-processors | Only those on the Sub-processors page, under contracts that bind them to comparable obligations; 14 days' notice and a right to leave before an addition. |
| Cross-border transfer | Data is stored in the United States. Where your obligations require India residency you tell us before uploading covered data and we scope an India-hosted arrangement in writing first. |
| Assistance | We help you answer data-principal requests and Board enquiries, and we provide the audit log and data export to support your own accountability. |
| Breach notification | Without unreasonable delay after we become aware, with the nature of the breach, the data and people affected, and the measures taken, updated as we learn more. |
| Deletion and return | Export is available to owners and admins at any time. On termination you delete the organisation; it is hidden at once and erased 30 days later as the Retention page describes, or sooner on written request. |
| Audit | Once a year, or after a breach, you may ask us written questions about our compliance with the agreement and we answer within 30 days; on-site audits by agreement. |
| Liability | Aligned with the Terms of Use unless the pilot or enterprise agreement says otherwise. |
What we ask of you
Enter only personal data you are entitled to process, tell the people concerned what you are doing with it, keep your member list current, and use the deletion tools rather than leaving records you no longer need. If a regulator or a data principal contacts us about data you control, we will refer them to you and tell you.
Get the signed version
Email hello@getklaritiq.com with "DPA" in the subject. Until incorporation we will send the pilot terms; after it, the agreement itself. Both cover exactly the clauses above.
Questions about anything on this page: hello@getklaritiq.com. We write these pages ourselves, in plain language, to match what the product actually does; they are not a substitute for legal advice to you.
Questions about this page?
Write to the KlaritiQ team about anything on it, including privacy requests and complaints.
Email the support team