Advocate Panel · by Bharatam Vinyas
Data Processing Addendum
1. Roles
For personal data that your organisation puts into its workspace (clients, parties, contacts, staff records, documents, messages), your organisation is the data fiduciary and Bharatam Vinyas is its data processor.
2. What we do with it
- We process it only to provide the service and as your organisation instructs through the app and its settings (for example, sending the reminders and messages you set up).
- We do not use it for our own purposes, sell it or show it to other workspaces.
- Our support staff see inside a workspace only when your administrator issues a support PIN; every support session is time-limited, recorded and can be ended by you.
3. Safeguards
- Data stored in India; encrypted connections; hashed passwords; encrypted integration keys; role-based access inside each workspace; ethical walls between matters; an audit trail of every change; daily backups with a restore check.
- People who work on the service are bound to confidentiality.
4. Sub-processors
Hosting and email delivery in India, and only the third-party providers your workspace itself connects (SMS, WhatsApp Business, email, payment gateway, court data, calendar, e-sign). We tell workspace owners before adding a new sub-processor for core hosting.
5. Breaches
We tell the workspace owner without undue delay, and in any case within 72 hours of becoming aware, of a personal-data breach affecting the workspace, with what we know and what we are doing, so your organisation can meet its own duties to the Board and the people affected.
6. Requests from individuals
We help your organisation answer access, correction and erasure requests: data can be exported, corrected or removed from the app, and support can assist.
7. End of service
On closure your organisation can export all its data. We keep it for 90 days and then delete or anonymise it, unless the law requires longer retention.