Purpose of This Agreement

The purpose of this DPA is to:

• Define responsibilities regarding data processing
• Ensure confidentiality and security of client data
• Establish compliance obligations
• Protect personal and business information handled during service delivery

This agreement applies whenever Lufera Infotech processes data on behalf of a client.

Definitions

“Controller”

The client or organization that determines the purpose and means of processing personal data.

“Processor”

Lufera Infotech Pvt. Ltd. OPC, which processes data on behalf of the client.

“Personal Data”

Any information relating to an identifiable individual including names, email addresses, phone numbers, IP addresses, and other identifiable information.

“Processing”

Any operation performed on data including collection, storage, organization, transmission, modification, or deletion.

Scope of Data Processing

Lufera Infotech may process data for services including:

• Website Development
• Web Application Development
• Mobile App Development
• SaaS Platforms
• Cloud Hosting & AWS Integrations
• CRM & ERP Solutions
• IT Infrastructure Support
• Technical Maintenance Services
• API & Third-Party Integrations

Data processing activities are limited to what is necessary for service delivery.

Types of Data Processed

Depending on the services provided, the following categories of data may be processed:

• Name and contact information
• Email addresses
• Phone numbers
• Company information
• Billing details
• Login credentials
• Technical logs
• IP addresses
• Customer records
• Application data
• Server and infrastructure data

Sensitive personal data should not be shared unless explicitly required and agreed upon.

Purpose of Processing

Data may be processed for:

• Delivering contracted services
• Technical support and maintenance
• Hosting and infrastructure management
• Cloud deployments
• Software customization
• System monitoring
• Security and troubleshooting
• Performance optimization
• Compliance obligations

Lufera Infotech will not process data for unrelated purposes without authorization.

Confidentiality Obligations

Lufera Infotech agrees to:

• Maintain confidentiality of client information
• Restrict access to authorized personnel only
• Ensure employees and contractors follow confidentiality obligations
• Protect proprietary and sensitive business data

Confidential information will not be disclosed to unauthorized third parties.

Security Measures

Lufera Infotech implements reasonable technical and organizational measures including:

• Secure access controls
• Password protection
• Firewall and server security
• Data encryption where applicable
• Security monitoring
• Cloud security best practices
• Software update management
• Backup procedures where included in agreements

While reasonable efforts are taken, no online system can guarantee absolute security.

Subprocessors & Third-Party Services

Lufera Infotech may utilize third-party providers including:

• AWS cloud infrastructure
• Hosting providers
• Payment gateways
• SaaS integrations
• External APIs
• Security and monitoring services

Where applicable, reasonable efforts are made to work with reputable providers maintaining appropriate security standards.

International Data Transfers

As part of global service delivery, data may be stored or processed through international cloud infrastructure and service providers.

By using our services, clients acknowledge and consent to such data transfers where necessary for service operations.

Data Retention

Client data will be retained only as long as necessary to:

• Deliver services
• Fulfill contractual obligations
• Maintain operational records
• Comply with legal requirements
• Resolve disputes
• Enforce agreements

Upon request or termination of services, data may be deleted, archived, or returned where technically feasible.

Data Subject Rights

Where applicable under data protection laws, clients or users may request:

• Access to stored personal data
• Correction of inaccurate information
• Deletion of personal data
• Restriction of processing
• Export of data where feasible

Requests may be submitted through official communication channels.

Data Breach Notification

In the event of a confirmed data breach affecting client data, Lufera Infotech will make reasonable efforts to:

• Investigate the incident
• Mitigate security risks
• Notify affected clients where appropriate
• Cooperate with necessary remediation measures

Notification timelines may depend on the nature and severity of the incident.

Client Responsibilities

Clients are responsible for:

• Ensuring legal authority to share data
• Maintaining secure credentials
• Backing up important data unless managed backup is included
• Configuring proper user access controls
• Complying with applicable data protection laws

Clients should avoid sharing unnecessary sensitive personal data.

Limitation of Liability

Lufera Infotech Pvt. Ltd. OPC shall not be liable for:

• Client-side security failures
• Data loss caused by unauthorized user access
• Third-party provider breaches
• Force majeure events
• Cyberattacks beyond reasonable control

Liability shall be limited to the value of the active service agreement where permitted by law.

Termination

This DPA remains effective while Lufera Infotech processes client data.

Upon termination of services:

• Data may be deleted or archived
• Access credentials may be revoked
• Certain records may be retained for legal or operational purposes

Changes to This Agreement

Lufera Infotech reserves the right to update or modify this Data Processing Agreement at any time.

Updated versions will be published on the official website.

Governing Law

This DPA shall be governed by the laws of India and subject to the jurisdiction of courts located in Tamil Nadu, India.

Contact Information

For questions regarding this Data Processing Agreement, please contact: