Data Processing Addendum

This addendum applies when you use MarkStack for business purposes and we process personal data on your behalf, for example details of your customers that you enter into a tool or a Business Profile. In that case you are the controller and MarkStack is the processor. The processor is [Legal entity name], [Registered address, India].

What we process

• Subject matter: running the MarkStack tools and services you ask for.
• Duration: while your account is open, plus the short period needed to delete it.
• Data: contact details and any content you submit. We do not ask for sensitive categories of data and you should not submit them.

Our commitments

• We process your data only to provide the service and on your documented instructions, which include your use of the product.
• We do not sell your data and we do not use it to train AI models. Our AI providers receive your input only to produce your result.
• People with access to the data are bound by confidentiality.
• We use encryption in transit, access controls, rate limiting and logging.
• We help you answer requests from individuals. You can export and delete your data from your account page at any time.
• If we confirm a breach affecting your data, we tell you without undue delay, and within 72 hours where we can.
• On account deletion we delete your data. Payment records are kept as tax law requires, without your profile attached.
• We allow reasonable audits of our compliance on written request and notice, and will share our documentation first.

Subprocessors

You authorise the providers on our subprocessors page. We will update that page before changes. If you object to a new subprocessor in writing, we will work with you or let you end your plan.

International transfers

Our providers may process data outside your country. Where required we rely on standard contractual clauses or equivalent safeguards.

Signed copy

To get a signed copy, email hello@getmarkstack.com from your account address.