Data Processing Agreement (DPA)

Last Updated: June 10, 2026

1. Definitions and Roles

This Data Processing Agreement governs the processing of personal data by NowMeLive on behalf of our Merchants. Under the Digital Personal Data Protection (DPDP) Act, 2023:

  • Data Fiduciary (Controller): The Merchant, who determines the purpose and means of processing their end-customers' personal data.
  • Data Processor: NowMeLive, processing data solely on behalf of the Merchant to provide the SaaS platform.
  • Data Principal: The end-customer purchasing from the Merchant.

2. Merchant Obligations (Fiduciary)

As the Data Fiduciary, you agree that you are solely responsible for:

  • Obtaining valid, verifiable consent from your customers before collecting their data via NowMeLive forms or checkouts.
  • Providing a clear, itemized privacy notice to your customers in English and relevant regional languages.
  • Responding to your customers' data rights requests (Access, Correction, Erasure) within legally mandated timeframes.

3. NowMeLive Obligations (Processor)

As the Data Processor, NowMeLive agrees to:

  • Process personal data only on documented instructions from the Merchant (e.g., executing API calls, providing dashboard tools).
  • Implement robust technical and organizational security measures, including AES-256 encryption at rest and TLS 1.3 in transit.
  • Notify the Merchant without undue delay (within 6 hours, as per CERT-In guidelines) upon becoming aware of a personal data breach affecting their organization.
  • Assist the Merchant with technical tools (via the Privacy Dashboard) to fulfill their customers' data rights requests.
  • Delete or return all personal data to the Merchant upon termination of the SaaS subscription, adhering to our 30-day data deletion cycle.

4. Use of Sub-processors

The Merchant grants NowMeLive general authorization to engage third-party sub-processors (e.g., AWS, Razorpay). NowMeLive will maintain an up-to-date list of sub-processors and notify the Merchant of any intended changes, giving the Merchant an opportunity to object.