Data processing terms · Anantam Ventures

This page sets out how Anantam Ventures processes personal data on behalf of businesses that use the app. It forms part of the Terms of Service.

Roles

Customer (the business using a project): the data fiduciary for personal data of its vendors, payees, labourers and customers that it enters or receives in the app (including through share links).
Anantam Ventures: the data processor, processing that data only to provide the app to the customer.

For staff accounts (name, email, phone of people who sign in), Anantam Ventures is the data fiduciary; see the Privacy Policy.

Instructions: we process customer data only to provide the app's features and as the customer directs through the app, not for our own purposes.
Confidentiality: only people who need access to run the service have it, and they are bound to keep it confidential.
Security: HTTPS with HSTS, per-project access control, encrypted storage, audit logs, masking of bank details, rate limits and backups.
Sub-processors: Microsoft Azure (hosting, database, storage, AI, email), and optionally Telegram and Google (see the Privacy Policy for locations). We will update this list before adding a new sub-processor.
Help with rights: project exports and record edits let customers answer access, correction and erasure requests; we help when asked.
Breaches: we tell the customer without undue delay after becoming aware of a breach affecting its data, with what we know, so it can meet its own obligations.
Deletion: when a customer stops using the service, we delete or return its project data on request, except where the law requires us to keep it.
Records: we keep an audit log and will give information reasonably needed to show compliance.

Has a lawful basis and gives any required notice to the people whose data it enters.
Enters only the data it needs, keeps it accurate, and decides how long to keep it (subject to accounting law).
Answers requests from its vendors, labour and customers, with our help.