Data Processing Agreement

The practitioner or firm that signs up ("Firm") is the data fiduciary for the personal data of its clients and other people it records in the service ("Client Data"). Zion Web Services ("Legalio") is the data processor for Client Data.

For the Firm's own account data, such as sign-in and billing details, Legalio is a data fiduciary, as described in the Privacy Policy.

Client Data includes names, contact details, business and trademark details, documents, messages, quotes, invoices and payment records that the Firm or its clients enter into the service. We process it only to provide Trademark Desk to the Firm: storing it, showing it to the Firm and its clients, sending service emails, and keeping the service secure.

• We process Client Data only on the Firm's documented instructions. Using the features of the service, and these terms, are those instructions.
• The Firm is responsible for having a lawful basis for the data, giving clients the required notices and obtaining their consent where needed.
• If we think an instruction breaks the law, we will tell the Firm.

We keep Client Data confidential. Only our people who need access to run or support the service can reach it, and they are bound by confidentiality duties. Our platform staff cannot see client documents unless they sign in as the Firm's administrator to give support. Every such access is logged.

The Firm agrees that we may use these sub-processors. We remain responsible for them, and bind them to protect data appropriately.

• Cloudflare: hosting, database, private file storage and network security.
• Clerk: sign-in.
• Resend: sending service emails.
• Razorpay: payments. Plan payments are on our account. Client payments are processed in the Firm's own Razorpay account.

If we add or replace a sub-processor, we will update this page and tell the Firm in advance where we reasonably can. A Firm that objects on reasonable grounds can cancel before the change takes effect.

• HTTPS for all traffic.
• Private file storage, with signed links that expire within 10 minutes.
• Every view and download of a client document is recorded in an audit log.
• Role-based, least-privilege access, with each firm's data kept separate from others.
• Payment keys stored encrypted.
• Bot protection and rate limits on public forms.

If we become aware of a breach affecting Client Data, we will tell the Firm without undue delay. We will share what we know: what happened, which records and clients are affected, and what we are doing. We keep logs detailed enough to identify the affected firms and records, so that the Firm can inform its clients and the Data Protection Board of India as the law requires.

People whose data the Firm holds can ask to access, correct or erase it, or to withdraw consent. The Firm can export or delete a client's data in the service, and deletion also removes stored files, unless a legal hold applies. If a person writes to us directly, we will pass the request to the Firm and give reasonable help for the Firm to respond.

When the Firm's subscription ends, we keep Client Data for 30 days so that the Firm can export it. After that we delete it, and the deletion is logged. We may keep data longer only where the law requires, and then only for that purpose.

On reasonable written request, and not more than once a year unless there has been a breach, we will give the Firm the information needed to show we follow this agreement. If that is not enough, we will allow a reasonable audit with notice, during business hours, subject to confidentiality and without risk to other firms' data.

This agreement is governed by the laws of India, and the courts at [PENDING: jurisdiction city] have jurisdiction, as set out in the Terms of Use. If the Terms and this agreement conflict on how Client Data is processed, this agreement applies.

For questions about this agreement, write to [PENDING: support email]. For data protection concerns, contact our grievance officer: [PENDING: grievance officer name], [PENDING: grievance officer email].