DATA PROCESSING AGREEMENT
Data Processing Agreement.
This agreement applies when Scalysis processes personal data for you. It forms part of our Terms of Service.
This agreement applies when Scalysis processes personal data for you. It forms part of our Terms of Service.
Last updated 26 Oct 2026 · RBF pvt ltd.
1. Roles
You are the Data Fiduciary. Scalysis is the Data Processor. We process personal data only on your documented instructions, as set out in this agreement and your use of the product.
You are the Data Fiduciary. Scalysis is the Data Processor. We process personal data only on your documented instructions, as set out in this agreement and your use of the product.
2. Scope
ITEM
DETAILS
Purpose
Placing and reviewing calls for order confirmation, delivery issues and cart recovery.
Placing and reviewing calls for order confirmation, delivery issues and cart recovery.
Whose data
Your customers and your team members.
Your customers and your team members.
Data types
Name, phone number, address, order details, call audio and transcripts.
Name, phone number, address, order details, call audio and transcripts.
Duration
For as long as you use Scalysis, plus the retention periods on our Security page.
For as long as you use Scalysis, plus the retention periods on our Security page.
3. What we commit to
Process personal data only for the purpose above.
Process personal data only for the purpose above.
Keep everyone with access bound by confidentiality.
Keep everyone with access bound by confidentiality.
Maintain the security measures listed on our Security page.
Maintain the security measures listed on our Security page.
Help you respond to access, correction and deletion requests.
Help you respond to access, correction and deletion requests.
Tell you about a personal data breach without undue delay, and within 72 hours of becoming aware of it.
Tell you about a personal data breach without undue delay, and within 72 hours of becoming aware of it.
4. Sub-processors
You authorise the sub-processors listed on our Sub-processors page. We’ll update that page at least 15 days before adding a new one. You can object in writing within that time.
You authorise the sub-processors listed on our Sub-processors page. We’ll update that page at least 15 days before adding a new one. You can object in writing within that time.
5. Where data lives
Data is stored and processed in India on Google Cloud (Mumbai). Some speech and AI providers may process call audio or transcripts outside India. These are marked on the Sub-processors page.
Data is stored and processed in India on Google Cloud (Mumbai). Some speech and AI providers may process call audio or transcripts outside India. These are marked on the Sub-processors page.
6. Deletion
When your contract ends, we delete your customers’ personal data within 30 days, unless the law requires us to keep it. You can ask for an export before then.
When your contract ends, we delete your customers’ personal data within 30 days, unless the law requires us to keep it. You can ask for an export before then.
7. Audits
Once a year, we’ll answer a reasonable security questionnaire and share relevant documentation on request.
Once a year, we’ll answer a reasonable security questionnaire and share relevant documentation on request.
8. Liability and law
Liability follows the limits in our Terms of Service. This agreement is governed by the laws of India, with courts in Delhi having jurisdiction.
Liability follows the limits in our Terms of Service. This agreement is governed by the laws of India, with courts in Delhi having jurisdiction.
Need a signed copy?
Need a signed copy?
We’ll send a countersigned DPA for your records.
Request DPA
Scalysis
© 2026 Scalysis by RBF pvt ltd.
TRAI
Scalysis
© 2026 Scalysis by RBF pvt ltd.
TRAI
Scalysis
© 2026 Scalysis by RBF pvt ltd.
TRAI