Approved — effective 2026-09-23

Legal & trust

Data Processing Addendum

Draft controller-to-processor terms. This page is not an executed agreement and cannot be accepted yet.

Document status: approved. Proposed approval date: 2026-09-23.

Parties and scope

The proposed processor is AIVEDIX PRIVATE LIMITED. The customer would act as controller or processor, as applicable, for personal data submitted to BrandIntel.

Processing instructions

Processing would be limited to documented customer instructions, providing and securing the service, and applicable legal duties. Subject matter, duration, data types, and data-subject categories must be completed in an executed DPA.

Confidentiality and security

Authorized personnel and providers would be bound by appropriate confidentiality and security obligations. The Security Overview identifies current controls and outstanding verification work.

Subprocessors and transfers

Only approved subprocessors should process customer personal data. Notice, objection, transfer-mechanism, and location terms must be completed before this DPA is offered for execution.

Assistance, incidents, and deletion

Requests concerning data-subject rights, impact assessments, incidents, return, or deletion should be directed to privacy@aivedix.com. Proposed retention periods are listed on the Retention page.

Execution

Proposed governing law: India. This draft has no legal effect until the parties execute an approved version.