Data Processing Addendum
How maaya.works processes customer personal data on your behalf — roles, security, sub-processors, and breach handling.
Last updated: June 2026
Roles
This addendum applies where Maaya Software Solutions Pvt Ltd processes personal data contained in your business records on your behalf. For that data, you are the data controller (or principal) and we are the processor. It forms part of our Terms of Service.
Scope and purpose
We process customer personal data only to provide the service, on your documented instructions (including through your use of product features), and as permitted by applicable law.
Sub-processors
We use vetted sub-processors to deliver the service, including cloud hosting on Amazon Web Services in the ap-south-1 (India) region. We require each to provide protections consistent with this addendum, and we remain responsible for their performance. A current list is available on request.
Security measures
We apply technical and organisational measures appropriate to the risk, including encryption in transit and at rest, role-based access on a least-privilege basis, and an append-only audit trail of actions. See our Security page for more.
Assisting you
We help you respond to requests from individuals exercising their rights, and to meet your obligations around security, breach notification, and impact assessments, taking into account the nature of the processing and the information available to us.
Breach notification
If we become aware of a personal data breach affecting your data, we will notify you without undue delay and provide the information you reasonably need to meet your own notification obligations.
Return and deletion
On termination, you may export your data for a reasonable period. After that, we delete or anonymise customer personal data unless we are required by law to retain it.
Contact
To request our sub-processor list or discuss this addendum, email privacy@maaya.works.