Last updated: December 2025
This Data Processing Agreement (“DPA”) forms part of the agreement between People’s Flow, a SaaS platform and an initiative of BizJunket (“Processor”), and the enterprise customer (“Controller”) using the Services provided via https://www.peoplesflow.in.
This DPA governs the processing of Personal Data in connection with the provision of People’s Flow’s cloud-based software solutions, including office management systems, sales tracking tools, and related business productivity services (“Services”).
1. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
- Controller: The entity that determines the purposes and means of Processing.
- Processor: People’s Flow, processing Personal Data on behalf of the Controller.
- Sub-processor: Any third party engaged by the Processor to assist in Processing.
2. Scope & Purpose of Processing
People’s Flow processes Personal Data solely for the purpose of:
- Providing, operating, and supporting the Services
- Implementing security, backups, and system maintenance
- Fulfilling contractual obligations
Processing shall be conducted only on documented instructions of the Controller.
3. Nature of Data & Data Subjects
Categories of Personal Data:
- Employee details (name, email, role, contact information)
- Sales/customer contact data
- Login and usage metadata
Categories of Data Subjects:
- Customer employees
- Authorized users
- Sales leads and contacts
4. Duration of Processing
Personal Data shall be processed:
- For the duration of the Service agreement
- Until deletion or return is requested upon termination, subject to legal retention obligations
5. Processor Obligations
People’s Flow shall:
- Process Personal Data only on documented instructions
- Ensure confidentiality of authorized personnel
- Implement appropriate technical and organizational security measures
- Not use Personal Data for any purpose other than service delivery
- Assist the Controller in responding to data subject requests where applicable
6. Sub-processing
- The Controller grants general authorization for the use of Sub-processors (e.g., cloud hosting, analytics, email services).
- People’s Flow shall ensure Sub-processors are bound by data protection obligations equivalent to this DPA.
- A list of Sub-processors may be provided upon request.
7. Data Security Measures
People’s Flow implements reasonable safeguards, including:
- Access controls and authentication
- Data encryption in transit (where applicable)
- Regular security updates and monitoring
- Controlled access to production environments
8. Data Breach Notification
In the event of a Personal Data breach:
- People’s Flow shall notify the Controller without undue delay after becoming aware of the breach
- Notification will include known details and mitigation steps
9. Data Subject Rights
- People’s Flow shall, to the extent legally permitted, assist the Controller in fulfilling data subject rights requests (access, correction, deletion).
- People’s Flow shall not respond directly to data subjects unless instructed by the Controller.
10. Data Deletion & Return
Upon termination of Services:
- Personal Data shall be deleted or returned within a reasonable timeframe
- Backup data may be retained temporarily for disaster recovery purposes only
11. Audits & Compliance
- People’s Flow shall make available information reasonably necessary to demonstrate compliance with this DPA.
- Audits may be conducted upon reasonable prior notice and subject to confidentiality.
12. Cross-Border Data Transfers
Where data is transferred outside India, appropriate safeguards shall be implemented and transfers shall comply with applicable data protection laws.
13. Limitation of Liability
Liability under this DPA shall be subject to the limitations set forth in the master service agreement, unless otherwise required by law.
14. Governing Law
This DPA shall be governed by the laws of India, without prejudice to mandatory data protection regulations.
15. Contact Information
People’s Flow (A BizJunket Initiative)
Email: info@peoplesflow.in
Phone: +91 88601 93857
Website: https://www.peoplesflow.in