Data Processing Addendum
The controller/processor framing of the same data practices described in the Privacy Policy, for business customers who need it on file for their own compliance records.
Who we are
"SoftSpidey", "we", "us", or "our" refers to SoftSpidey Technologies (Limited Liability Partnership (LLP)), registered at Birbhum, West Bengal, India. This document is between SoftSpidey and you, the person or organisation using our website or apps ("you").
How to contact us
For any question about this document, or to send a formal legal notice, email contact@softspidey.com. This is also the address for general support: contact@softspidey.com.
Grievance officer
If you have an unresolved complaint about how we've handled your data or your account, The Grievance Officer, SoftSpidey Technologies can be reached at contact@softspidey.com and will acknowledge your complaint and respond within a reasonable time.
Who this is for
This page describes how SoftSpidey Technologies ("SoftSpidey") processes personal data on behalf of a business customer, for organisations that need this framing on file for their own compliance records. If you're an individual customer, the Privacy Policy already describes the same practices and is the document that applies to you.
Roles
Where your organisation's staff use SoftSpidey under licences your organisation purchased, your organisation is the data controller for its staff's account and usage data, and SoftSpidey acts as a data processor, processing that data only to provide the service and only on your organisation's instructions (including these documents).
Nature and purpose of processing
What's collected, why, how long it's kept, and which sub-processors we use are set out in full in the Privacy Policy's "what we collect", "why we collect it", "how long we keep it", and "who we share it with" sections — those sections apply here without modification.
Changes to sub-processors
If we add a new sub-processor that materially changes how your staff's data is handled, we'll update the Privacy Policy and, where the change is material, notify account administrators. Contact contact@softspidey.com if you'd like advance notice of sub-processor changes for your organisation specifically.
Assisting your compliance obligations
We'll provide reasonable assistance with data subject requests, security incident notification, and information needed for your own compliance obligations, to the extent the request relates to data we actually hold. Contact contact@softspidey.com to make a request.
What we collect
We collect the information needed to run your account, deliver licences, and process payments:
- Account information: your name and email address, from Google sign-in
- Purchase information: what you bought, when, the price, and (for Indian invoices) billing address and GSTIN if you provide one
- Licence and activation data: which machines a licence is active on, so we can enforce machine limits and support you if you need to deactivate one
- Support and review content: anything you send us directly, or post as a product review or blog comment
- Basic usage and diagnostic data: pages visited on this site, and periodic license-validity check-ins from the desktop apps (see each app's product-specific privacy page for what, if anything, that app itself sends)
Why we collect it
We use this information to create and secure your account, process payments and issue invoices, deliver and validate licences, respond to support requests, and (where you've agreed, see the Cookie Policy) understand aggregate site usage. We don't sell your personal data.
How long we keep it
We keep account and purchase records for as long as your account is active and for a further period afterward as needed to meet tax, accounting, and legal obligations. You can ask us to delete data we're not required to retain — see "your rights" below.
Who we share it with
We share the minimum data necessary with the services that make the product work: Google (sign-in), Razorpay (payment processing), our email delivery provider (transactional email — receipts, licence keys, account notices), and our hosting provider (running the site and storing the database). Each acts under its own privacy terms for the data it handles; none of them are permitted to use your data for their own marketing purposes.
International transfer
Our infrastructure and the third parties listed above may process data outside the country you're in, including in India. Where a transfer requires a specific legal safeguard under your local law, we rely on the mechanism that provider makes available for that purpose.
Your rights
Under India's Digital Personal Data Protection Act, 2023, and equivalent protections elsewhere, you have the right to:
- Access — a summary of the personal data we hold about you and who we've shared it with
- Correction and erasure — fix inaccurate data, or ask us to delete data we're no longer required to keep
- Grievance redressal — raise a complaint with our grievance officer (see "who we are" above), and escalate to the Data Protection Board of India if it isn't resolved to your satisfaction
- Nominate — name someone to exercise these rights on your behalf if you die or become incapacitated
To exercise any of these, email contact@softspidey.com — we'll verify your identity against your account and respond within a reasonable time, free of charge unless the request is excessive or repetitive.
Children
SoftSpidey's products are not directed at children, and we don't knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we'll delete it.
Governing law
This document is governed by the laws of India, without regard to conflict-of-law principles, except where a mandatory local consumer-protection law gives you rights this document cannot override.
Dispute resolution
Any dispute arising from this document or your use of SoftSpidey will first be addressed informally — contact us and we'll try to resolve it directly. If that doesn't work, the dispute is subject to the exclusive jurisdiction of the courts at Birbhum, West Bengal.
Severability
If any part of this document is found unenforceable, that part is limited or removed to the minimum extent necessary, and the rest continues in full effect.
Entire agreement
This document (together with any product-specific terms, licence agreement, or privacy policy it links to) is the entire agreement between you and us about its subject matter, and supersedes any earlier agreement on the same subject.
Assignment
You may not assign or transfer your rights under this document without our consent. We may assign this document in connection with a merger, acquisition, or sale of substantially all of SoftSpidey's assets, and will notify you if we do.
Force majeure
Neither party is liable for a failure or delay in performance caused by events beyond its reasonable control, including natural disasters, war, internet or infrastructure outages, or actions of government authorities.
Changelog
- 2026-07-29.1 (2026-07-29) — Initial publication.