Data Processing Agreement (DPA)

Effective Date: July 8, 2026

DigiVerse Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the Terms & Conditions between DigiRich ("Processor", "we", "our", or "us") and the customer ("Controller", "Customer", "you") using DigiVerse.

This Agreement governs how DigiVerse processes personal data on behalf of customers while providing software, cloud services, AI services, CRM, marketing automation, communication tools, analytics, and related business services.

1. Purpose

This Data Processing Agreement forms an integral part of the DigiVerse Terms & Conditions.

Its purpose is to explain how DigiRich processes personal data on behalf of customers while delivering DigiVerse services in compliance with applicable privacy and data protection laws.

By using DigiVerse, you acknowledge and agree to the processing activities described in this Agreement.

2. Definitions

For the purposes of this Agreement, the following definitions apply:

  • Controller means the customer who determines the purpose and means of processing personal data.
  • Processor means DigiRich, which processes personal data on behalf of the Controller.
  • Personal Data means any information relating to an identified or identifiable natural person.
  • Processing includes collecting, recording, storing, organizing, using, transmitting, retrieving, modifying, deleting, or otherwise handling personal data.

3. Scope of Processing

DigiVerse may process customer data including, but not limited to:

  • Customer Names
  • Email Addresses
  • Mobile Numbers
  • CRM Records
  • Lead Information
  • Marketing Data
  • Forms
  • Uploaded Files
  • WhatsApp Conversations
  • Facebook Messages
  • Instagram Messages
  • AI Prompts
  • Campaign Data
  • Analytics
  • Team Collaboration Data

Processing is performed solely for the purpose of providing the DigiVerse services requested and configured by the Customer.

4. Purpose of Processing

DigiVerse processes personal data only for legitimate business purposes including:

  • CRM and Lead Management
  • Customer Communication
  • Marketing Automation
  • Analytics and Reporting
  • AI-Assisted Services
  • Workflow Automation
  • Customer Support
  • Platform Security
  • Billing and Subscription Management
  • Product and Feature Improvements

5. Customer Responsibilities

The Customer represents, warrants, and agrees that:

  • They have all necessary permissions and lawful authority to upload, store, and process personal data through DigiVerse.
  • They have obtained all required consents from their customers or data subjects where applicable.
  • They comply with all applicable privacy, data protection, and electronic communication laws.
  • They will not upload unlawful, misleading, defamatory, infringing, or otherwise prohibited content through the Platform.

The Customer remains solely responsible for the legality, accuracy, and integrity of all personal data submitted to DigiVerse.

6. DigiRich Responsibilities

DigiRich acts as a Data Processor and agrees to process personal data only for the purpose of providing the DigiVerse services requested by the Customer.

DigiRich will:

  • Process personal data only as instructed through the normal use and configuration of DigiVerse.
  • Implement commercially reasonable technical and organizational security measures.
  • Restrict access to customer data to authorized personnel only.
  • Maintain the confidentiality of customer information.
  • Provide reasonable assistance with privacy-related requests where required under applicable law.

DigiRich will not sell customer personal data or process it for purposes unrelated to providing the DigiVerse Platform unless required by law or expressly authorized by the Customer.

7. Security Measures

DigiVerse implements commercially reasonable technical and organizational safeguards designed to protect customer information against unauthorized access, disclosure, alteration, or destruction.

Security measures may include, where appropriate:

  • HTTPS / SSL Encryption
  • Secure User Authentication
  • Role-Based Access Controls
  • Server Monitoring
  • Firewall Protection
  • Regular Backup Procedures
  • System Logging and Audit Trails
  • Password Protection
  • Infrastructure Security Best Practices

Although DigiRich uses reasonable efforts to protect customer information, no method of electronic storage or transmission over the Internet can be guaranteed to be completely secure.

8. AI Processing

DigiVerse includes Artificial Intelligence (AI) powered features that process prompts, instructions, and related information submitted by authorized users in order to generate requested outputs.

Customers acknowledge and agree that:

  • AI features process only the information submitted by authorized users.
  • Customers remain responsible for ensuring they have the legal right to submit such information.
  • Customers should avoid submitting highly sensitive, confidential, regulated, or restricted information unless appropriate safeguards and permissions are in place.
  • AI-generated responses should always be reviewed before being relied upon, published, or shared.

DigiRich does not guarantee the accuracy, completeness, legality, or suitability of AI-generated outputs.

9. Sub-processors

DigiRich may engage carefully selected third-party service providers ("Sub-processors") to assist in delivering DigiVerse services.

Sub-processors may provide services including:

  • Cloud Hosting
  • Payment Processing
  • Artificial Intelligence Services
  • Messaging Services
  • Email Delivery
  • Analytics
  • Communication Platforms
  • Infrastructure Management

DigiRich will take reasonable steps to ensure that all Sub-processors are contractually obligated to protect customer data through appropriate confidentiality, privacy, and security commitments.

10. International Data Transfers

Where necessary to provide DigiVerse services, customer data may be processed, stored, or transferred to trusted infrastructure or service providers located outside India.

Such transfers will only occur where appropriate technical, contractual, and organizational safeguards are maintained to help protect customer information.

By using DigiVerse, the Customer acknowledges and consents to such international processing where required for the delivery, maintenance, support, or improvement of the Services.

11. Data Retention

DigiRich retains customer data only for as long as necessary to provide the DigiVerse Services and to comply with applicable legal, contractual, operational, and regulatory requirements.

Customer data may be retained for purposes including:

  • Providing and maintaining the Services.
  • Meeting legal and regulatory obligations.
  • Resolving disputes.
  • Enforcing contractual rights and obligations.
  • Maintaining disaster recovery and backup systems.

Following account deletion or termination of the Services, customer data will be deleted, anonymized, or securely archived within a reasonable period unless continued retention is required by applicable law or legitimate business obligations.

12. Data Subject Requests

Where required under applicable privacy and data protection laws, DigiRich will provide reasonable assistance to the Customer in responding to requests from data subjects.

Such requests may include:

  • Access to personal data.
  • Correction of inaccurate information.
  • Deletion of personal data.
  • Restriction of processing.
  • Data portability requests.
  • Withdrawal of consent where applicable.

The Customer remains responsible for determining the legality of responding to such requests and for providing appropriate instructions to DigiRich where required.

13. Confidentiality

DigiRich maintains appropriate confidentiality obligations regarding customer information and personal data processed through DigiVerse.

All employees, contractors, consultants, and authorized personnel who may access customer data are required to comply with confidentiality obligations appropriate to their role and responsibilities.

DigiRich will take reasonable steps to ensure that customer information is accessed only by individuals who require such access for the purpose of providing, maintaining, securing, or supporting the DigiVerse Services.

14. Data Breach

If DigiVerse becomes aware of a confirmed security incident that affects customer personal data, DigiRich will take reasonable steps to:

  • Investigate the nature and scope of the incident.
  • Contain and mitigate the impact of the incident.
  • Restore affected systems where reasonably possible.
  • Notify affected customers where required under applicable law.
  • Cooperate with customers regarding reasonable requests related to the incident.

Notifications will be provided within a reasonable timeframe after sufficient information becomes available and where disclosure is legally permitted.

15. Termination

Upon termination or expiration of the DigiVerse Services, customer data will be handled in accordance with:

  • The DigiVerse Account Deletion Policy.
  • Applicable privacy and data protection laws.
  • Any contractual obligations agreed between the Customer and DigiRich.

Where appropriate, DigiRich may securely delete, anonymize, or retain certain information for backup, legal compliance, fraud prevention, dispute resolution, or other legitimate business purposes permitted by applicable law.

16. Governing Law

This Data Processing Agreement ("DPA") shall be governed by and construed in accordance with the laws of India.

Any dispute, controversy, or claim arising out of or relating to this DPA, the processing of personal data, or the DigiVerse Services shall be subject to the exclusive jurisdiction of the competent courts located in Mumbai, Maharashtra, India.

Nothing in this Agreement shall prevent DigiRich from taking any action required to comply with applicable legal, regulatory, or governmental requirements.

17. Contact

If you have any questions, requests, or concerns regarding this Data Processing Agreement or DigiVerse's data processing practices, please contact us using the details below.

DigiRich

Email: support@digirich.in
Website: https://digirich.in

To help us respond to your enquiry efficiently, please include:

  • Your registered email address.
  • Your DigiVerse account or organization name.
  • A description of your request or concern.
  • Any relevant reference numbers or supporting information.

Acknowledgement

By accessing, registering for, or using DigiVerse, you acknowledge that you have read, understood, and agreed to this Data Processing Agreement, together with the DigiVerse Terms & Conditions and Privacy Policy.

This Agreement forms an integral part of your contractual relationship with DigiRich and applies for as long as DigiRich processes personal data on your behalf in connection with the DigiVerse Services.