Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the agreement between GrowVisi ("Processor") and the business customer ("Controller") that uses our WhatsApp conversation intelligence platform at www.growvisi.in.

It applies when GrowVisi processes personal data on your behalf — for example WhatsApp messages, contact phone numbers, and lead data you connect through the WhatsApp Business Platform.

• You (Controller) determine purposes and means of processing customer and lead data.
• GrowVisi (Processor) processes data only on your documented instructions via the Service and your account settings.

Processing relates to providing WhatsApp message ingestion, classification, pipeline tracking, and related analytics for your workspace. Processing continues for the subscription term and ends when you delete your account or we delete data per your instructions.

We use the following categories of subprocessors to deliver the Service:

• Vercel — application hosting (India/global edge)
• Supabase — PostgreSQL database
• Upstash — Redis queues (when enabled)
• Resend — transactional email
• OpenAI — optional AI classification (only when enabled and configured)
• Meta / WhatsApp — messaging platform you connect

We require subprocessors to protect data under written terms. Material changes will be communicated via our Privacy Policy.

We implement measures described in our Privacy Policy including encryption in transit, access controls, and encrypted storage of WhatsApp access tokens. Personnel with access are bound by confidentiality obligations.

We assist you in responding to data subject requests where technically feasible. End users may also follow our Data deletion instructions.

Data may be processed outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

DPA and security questions: legal@growvisi.in. Enterprise customers may request a countersigned copy by email.