Data Processing Agreement
Last updated: 2026-05-04
Overview
This DPA forms part of our Terms of Service and applies whenever PulseBoard processes personal data on your behalf — as a Processor under GDPR / UK-GDPR / CCPA, and as a Data Processor under India's Digital Personal Data Protection Act, 2023.
India — DPDP Act, 2023
PulseBoard is operated by an Indian entity. Where you decide why and how your team's personal data is processed, you are the Data Fiduciary and we are your Data Processor, acting only on your documented instructions. The people whose data we hold — your team members — are Data Principals.
- We process only for the purposes you engage us for, and for no purpose of our own.
- We do not use your data, or anything derived from it, to train models. This holds whether the AI features run on our key or on one you supply.
- On termination we delete your organisation's data on request, and otherwise on the schedule in the Privacy Policy.
- We notify you without undue delay of a personal data breach so that you can meet your own reporting obligations to the Data Protection Board of India.
Requests from Data Principals — access, correction, erasure, grievance — come to you as the Data Fiduciary; we assist you in answering them. Our Grievance Officer is named in the Privacy Policy.
What we process
Names, emails, organisational role, daily-update content, ticket content, login metadata (IP, user agent), telemetry. We never sell or share for advertising.
Sub-processors
See Privacy Policy. We notify you of new sub-processors via email at least 30 days in advance.
Standard Contractual Clauses
For EU/UK to US data transfers we rely on the EU-approved 2021 Standard Contractual Clauses and the UK International Data Transfer Addendum.
Cross-border transfer from India
Your data is stored in the United States (see the Privacy Policy). The DPDP Act permits transfer of personal data outside India except to countries the Central Government has restricted by notification; the United States is not currently restricted. If that changes, or if you need data held in India, tell us before you sign up rather than after — we do not offer an India region today.
Security measures
To countersign
Email legal@pulseboard.io with your signed copy and we'll return ours within 5 business days.