Data Processing Agreement

1. Parties

Data Fiduciary / Customer: The entity entering into a subscription or workspace agreement with Fundaking Media OPC Pvt Ltd.

Data Processor: Fundaking Media OPC Pvt Ltd, operating UltraLooper (“Processor”).

2. Subject matter

Processor processes personal data on behalf of Customer when Customer uses UltraLooper workplace apps, CRM, mail, AI agents, and related features. Customer determines purposes and means for tenant-uploaded data (contacts, leads, mail recipients, workplace content).

3. Processor obligations

• Process personal data only on documented Customer instructions.
• Ensure persons authorised to process data are bound by confidentiality.
• Implement appropriate technical and organisational measures (encryption, RBAC, audit logs).
• Assist Customer with data principal rights requests where applicable.
• Notify Customer without undue delay upon becoming aware of a personal data breach.
• Delete or return personal data upon termination, subject to legal retention.

4. Sub-processors

Customer authorises use of sub-processors listed in our Privacy Policy §8, including:

• Google (Gemini, OAuth, Drive), OpenAI, PayU, Postmark, Apify, DataForSEO, Sentry, LiveKit

Processor will maintain an up-to-date sub-processor register in documentation/DPDP_ROPA.md.

5. Cross-border transfers

Some sub-processors may process data outside India. Processor implements contractual safeguards and disclosures required under applicable law.

6. Security

See Privacy Policy §9 and our security documentation. Processor maintains incident response procedures per DPDP requirements.

7. Term

This DPA applies for the duration of the Customer’s use of UltraLooper and survives termination until data deletion obligations are fulfilled.

8. Contact

For signed enterprise DPAs: support@ultralooper.com
Grievance Officer: Privacy Grievance Officer