Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the Terms of Service between your organization ("Customer," "Data Fiduciary") and YSS Borkar, operator of OpsRail ("Processor"). It applies whenever OpsRail processes personal data of Customer's own customers, leads, or contacts on Customer's behalf ("Business Data").

1. Roles

For Business Data entered into OpsRail (customer names, contact details, addresses, GST numbers, and related order/credit records), Customer is the Data Fiduciary (controller) and OpsRail is the Data Processor. Customer determines what data is collected and why; OpsRail processes it only to provide the Service.

2. Processing instructions

OpsRail will process Business Data only as necessary to provide the Service, in accordance with Customer's instructions as reflected in Customer's configuration and use of the platform, and will not use Business Data for its own purposes, including marketing or profiling.

3. Subprocessors

OpsRail uses the following subprocessors to provide the Service:

• Supabase — database hosting and storage (Singapore region)
• Customer's configured SMTP/email provider — sends emails triggered by Customer's users
• Sentry — error diagnostics, only if enabled by OpsRail for operational monitoring

We will provide reasonable advance notice before adding or replacing a subprocessor that has access to Business Data, and Customer may object on reasonable data-protection grounds.

4. Security measures

OpsRail maintains technical and organizational measures appropriate to the risk, including encryption in transit (TLS), hashed credential storage, role- and territory-based access control, rate limiting on authentication endpoints, and audit logging of significant actions.

5. Assistance with data subject requests

Where Customer receives a request from an individual to access, correct, or delete their personal data held within OpsRail, OpsRail will provide reasonable technical assistance to help Customer fulfill that request, including through the platform's existing edit/delete functionality.

6. Data breach notification

In the event of a confirmed breach affecting Business Data, OpsRail will notify Customer without undue delay after becoming aware of it, with information reasonably available at the time, to enable Customer to meet its own notification obligations.

7. Data return and deletion

On termination of the Service, OpsRail will make Business Data available to Customer for export for a reasonable period, after which it will be deleted from active systems, except where retention is required by law.

8. International transfer

Business Data is currently stored on infrastructure located in Singapore. By using the Service, Customer consents to this storage location. OpsRail will notify Customer of any change in storage region.

Contact

YSS Borkar, Margao, Goa, India
Email: contact@yoursoftwaresupplierborkar.com