Privacy · Processing · Compliance

Data Processing Addendum

How Audentrix Pvt. Ltd. processes Personal Data on behalf of its customers: the roles each party holds, the safeguards applied, and the commitments that come with them.

Read the document Security Note

Version

1.0

Effective Date

14th Aug, 2026

Company

Audentrix Pvt. Ltd.

Product

Emovur WA API

Customer acts as Data Controller; Emovur acts as Data Processor

Section 01

Roles

The DPA assigns each party a defined role under applicable data protection law.

This Data Processing Addendum forms part of the Terms of Service, Master Services Agreement, or other applicable agreement governing the use of the Emovur Services. It applies whenever Audentrix Pvt. Ltd. (Emovur) processes Personal Data on behalf of a customer in connection with the Services. By using the Services or entering into the applicable agreement, the Customer accepts this DPA.

Data Controller

Customer. Determines the purposes and means of processing Personal Data.

Data Processor

Audentrix Pvt. Ltd. (Emovur). Processes Personal Data only to provide the Services.

Section 02

Scope

This DPA covers the processing activities Emovur performs to operate the Services on the Customer's behalf.

Processing includes

Authentication
Messaging
Contact management
Conversation storage
Analytics
Support
Backups
Platform administration

Section 03

Categories of Personal Data

Depending on how the Customer configures and uses the Services, Personal Data may include the following categories.

Identity & contact data

Names
Email addresses
Phone numbers
WhatsApp numbers

Content & technical data

Message content and media
IP addresses
Device information
Usage logs and support communications

Section 04

Security Measures

Emovur maintains technical and organizational measures appropriate to the risk of the processing.

Encryption in transit and at restAccess controlsRBACMFA for privileged accessAudit loggingMonitoringSecure software developmentBackup and disaster recoveryIncident response

These measures are described in more detail in the Emovur Security Note.

Section 05

Confidentiality

Authorized personnel are bound by confidentiality obligations and granted access only on a need-to-know basis.

Section 06

Subprocessors

Emovur may engage subprocessors necessary to provide the Services and requires them to maintain appropriate security and confidentiality obligations.

A current subprocessor list is available upon request. Third-party providers are listed in the Security Note.

Section 07

International Transfers

Where applicable, cross-border transfers are protected using appropriate safeguards required by applicable law.

Section 08

Data Subject Requests

Emovur will reasonably assist Customers in responding to requests from data subjects.

Assistance covers requests relating to

Access
Correction
Deletion
Restriction
Objection
Portability, where supported

Section 09

Personal Data Breaches

Emovur maintains an incident response process and will notify Customers of confirmed Personal Data Breaches where required by law or contract.

Section 10

Retention and Deletion

Personal Data is retained only as necessary to provide the Services or comply with legal obligations.

Following termination, production data is deleted within the documented retention period unless otherwise required by law. Backup data is deleted according to backup retention schedules.

Section 11