DATA PROCESSING AGREEMENT (DPA)

DATA  PROCESSING  AGREEMENT  (DPA) 

Effective Date: 2026 

This Data Processing Agreement (“DPA”) forms part of the WhitePanther Terms of Service between: 

• HOODS HUB PRIVATE LIMITED (“WhitePanther”, “Processor”)  

• The customer using the WhitePanther platform (“Customer”, “Controller”)  

Purpose & Scope 

This DPA governs how WhitePanther processes Personal Data on behalf of the Customer in connection with the platform. 

It applies where WhitePanther acts as a Data Processor under: 

• GDPR (where applicable)  

• Applicable Indian data protection laws  

• Other relevant data protection frameworks  

Roles of the Parties 

Customer (Controller) 

The Customer determines: 

• The purpose of data processing  

• The type of data processed  

• The lawful basis for processing  

The Customer is responsible for: 

• Providing required notices to end users  

• Ensuring lawful collection and use of data  

• Managing data accuracy and permissions  

WhitePanther (Processor) 

WhitePanther will: 

• Process data only on Customer instructions  

• Use data solely to provide and improve the Service  

• Not sell, rent, or resell Personal Data  

• Not use Personal Data for advertising  

• Apply appropriate security and confidentiality controls  

WhitePanther does not independently determine how Customer data is used. 

Nature of Processing 

Processing may include: 

• Account and user management  

• Workflow and task processing  

• Communication and collaboration features  

• Storage and data management  

• AI-assisted processing and automation  

• Platform analytics and support  

Processing is limited to what is necessary to deliver the Service. 

Types of Personal Data 

Depending on usage, Personal Data may include: 

• Names and contact details  

• Organization and account information  

• Usage and activity data  

• Communication content within the platform  

• User-generated business data  

WhitePanther does not intentionally process sensitive categories of data unless provided by the Customer. 

AI Processing 

WhitePanther provides AI-powered features. 

• AI processes Customer-provided inputs to generate outputs  

• Limited data may be used to improve AI performance  

Safeguards 

• Data used for improvement is anonymized or aggregated where possible  

• No use of Personal Data for advertising or profiling  

• No resale of Customer data  

Confidentiality 

WhitePanther ensures: 

• Personnel are bound by confidentiality obligations  

• Access is restricted on a need-to-know basis  

• Administrative access is controlled and monitored  

Security Measures 

WhitePanther maintains security controls aligned with ISO/IEC 27001 principles, including: 

• Encryption (in transit and at rest)  

• Access control mechanisms  

• Secure authentication systems  

• Logging and monitoring  

• Environment segregation  

• Incident response processes  

Sub-Processors 

WhitePanther may engage trusted Sub-Processors to support service delivery. 

We will: 

• Apply appropriate contractual safeguards  

• Ensure Sub-Processors meet security and data protection standards  

• Remain responsible for their compliance  

A Sub-Processor list is available upon request. 

International Data Transfers 

Where data is transferred outside the Customer’s jurisdiction: 

• Appropriate safeguards are implemented  

• Transfers align with GDPR principles where applicable  

Data Subject Rights 

WhitePanther will assist the Customer in responding to requests related to: 

• Access  

• Correction  

• Deletion  

• Restriction  

• Portability  

The Customer remains responsible for handling such requests. 

Personal Data Breach 

In the event of a confirmed breach affecting Customer data: 

WhitePanther will: 

• Notify the Customer without undue delay  

• Provide relevant details  

• Support mitigation efforts  

WhitePanther is not responsible for breaches caused by: 

• Customer misconfiguration  

• Compromised credentials  

• Third-party systems outside our control  

Data Retention & Deletion 

Upon termination: 

• Customers may request data export  

• Data will be deleted or anonymized after applicable retention periods  

• Backup systems may retain data temporarily for recovery purposes  

Audit & Information Rights 

Upon reasonable request: 

• WhitePanther may provide information about security practices  

• Summaries may be shared  

We are not required to disclose sensitive internal security details or allow unrestricted audits unless legally required. 

Liability 

Liability under this DPA is subject to the limitations set out in the Terms of Service. 

Governing Law 

This DPA is governed by the laws of India. 

Jurisdiction: Courts of Chennai, Tamil Nadu. 

Contact 

For data protection inquiries: 

Email: customersupport@whitepanther.email 

Operated by: 
HOODS HUB PRIVATE LIMITED