Data Processing Agreement

Scope

This Data Processing Agreement applies to enterprise customers (future tier) and covers data processing terms under the service agreement.

Roles

OrigamiFalcon acts as data processor; the customer is the data controller.

Sub-processors

Customers are notified of sub-processor changes 30 days in advance.

Data transfer

Data is stored in India (Supabase ap-south-1). Cross-border transfer occurs only with customer consent and adequate safeguards.

Breach notification

Customers are notified within 72 hours of a confirmed data breach.

Audit rights

Customers may audit OrigamiFalcon data processing practices with reasonable notice.

Termination

The DPA terminates with the service agreement. Data is returned or deleted per the retention schedule.

Contact

DPA questions: privacy@origamifalcon.in.