Data Processing Agreement (DPA)

1. Introduction

This Data Processing Agreement ("DPA") forms part of the CrawlSage Terms of Service and applies where NGOFeed Digital Solution Private Limited("Company," "Processor," "we," "our," or "us") processes personal data on behalf of a customer ("Customer" or "Controller") in connection with the CrawlSage Services.

This DPA describes the responsibilities of both parties regarding the processing and protection of personal data.

2. Company Information

NGOFeed Digital Solution Private Limited

Product: CrawlSage

Website: https://crawlsage.com

Support Email: support@crawlsage.com

Legal Email: legal@crawlsage.com

Corporate Identification Number (CIN): U62099DL2024PTC435623

GSTIN: 07AAJCN8222D1ZK

Registered Office:

HNO-L-4, 1st Floor, Gaffar Manzil Part 2, Jamia Nagar, New Delhi, South Delhi – 110025, Delhi, India

3. Definitions

For this DPA:

Controller means the person or organization determining the purposes and means of processing personal data.
Processor means NGOFeed Digital Solution Private Limited, acting on behalf of the Controller.
Personal Data means any information relating to an identified or identifiable individual, as defined by applicable law.
Processing includes collecting, storing, using, analyzing, transmitting, deleting, or otherwise handling Personal Data.

4. Scope of Processing

The Company processes personal data solely to provide the CrawlSage Services, including:

User account management
Website auditing
AI-assisted SEO analysis
Technical reporting
Customer support
Subscription management
Security monitoring
Service improvement

5. Categories of Data

Depending on how the Services are used, processing may include:

Name
Email address
Company name
Login information
Website URLs
Public website content submitted for analysis
Technical SEO metadata
Usage information
Support communications

6. Customer Responsibilities

The Customer is responsible for:

Ensuring a lawful basis for processing personal data.
Obtaining any required notices or consents.
Ensuring submitted data complies with applicable law.
Providing accurate instructions to the Company.

7. Company Responsibilities

The Company will:

Process personal data only as necessary to provide the Services or as required by law.
Maintain reasonable administrative, technical, and organizational security measures.
Limit access to authorized personnel.
Require personnel with access to personal data to maintain confidentiality.
Assist the Customer where reasonably necessary to meet applicable legal obligations.

8. Confidentiality

The Company will take reasonable steps to ensure that employees, contractors, and authorized service providers with access to personal data are subject to appropriate confidentiality obligations.

9. Security Measures

The Company maintains reasonable safeguards designed to protect personal data, including, where appropriate:

Encryption in transit where supported.
Secure authentication mechanisms.
Access controls.
Security monitoring.
Audit logging.
Regular software updates and security maintenance.

The Company continually evaluates and improves its security practices based on operational requirements and evolving risks.

10. Subprocessors

The Company may engage trusted third-party service providers ("Subprocessors") to assist in providing the Services.

Examples may include:

Cloud infrastructure providers
Payment processors
Email delivery providers
Authentication providers
Artificial intelligence providers
Customer support tools

The Company remains responsible for managing its Subprocessors in accordance with applicable contractual obligations.

11. International Data Transfers

Where personal data is transferred across national borders, the Company will implement appropriate safeguards where required by applicable law.

12. Data Retention and Deletion

Personal data will be retained only for as long as reasonably necessary to:

Provide the Services.
Meet legal obligations.
Resolve disputes.
Maintain platform security.

Upon expiration of the applicable retention period, data may be deleted, anonymized, or otherwise securely disposed of.

13. Security Incidents

If the Company becomes aware of a security incident affecting personal data, it will take reasonable steps to:

Investigate the incident.
Contain and mitigate its impact.
Restore affected systems where appropriate.
Comply with applicable legal notification obligations.

14. Audits and Information Requests

Where required by applicable law or agreed in writing, the Company may provide reasonable information regarding its processing activities to help Customers assess compliance with this DPA, subject to confidentiality obligations and protection of the Company's proprietary information.

15. Term and Termination

This DPA remains in effect for as long as the Company processes personal data on behalf of the Customer in connection with the Services.

Termination of the underlying Services Agreement will also terminate this DPA, except for obligations that survive by their nature or by law.

16. Governing Law

This DPA shall be governed by the same governing law and jurisdiction specified in the CrawlSage Terms of Service unless otherwise agreed in writing between the parties.

17. Contact Us

Questions regarding this Data Processing Agreement may be directed to: