Privacy policy
What personal data CosmoOps Contracts holds, why, where it is stored, and how to exercise your rights under India's Digital Personal Data Protection Act, 2023.
Last updated
1. Who this notice is from
CosmoOps Contracts is an application on the CosmoOps platform. For the contracts and contacts a workspace stores, that workspace is the Data Fiduciary and we process the data on its behalf. For your own account, the platform operator named under section 7 is.
2. Personal data we process
- Members: name, email address, role and what each did - the activity on every contract.
- Counterparties and their contacts: names, titles, email addresses, phone numbers, addresses and GSTINs.
- The contents of contracts and uploaded documents, which may themselves contain personal data.
- Signers: name, email address, the signature they typed or drew, and the audit trail of each signing step - time, IP address and device.
3. Why we process it
To provide the service the workspace subscribed to: storing and routing its contracts, sending the invitations, codes and reminders it asks us to send, and producing the evidence - versions, hashes and audit trails - that makes an electronic signature worth something. We do not sell personal data or use contract contents to train models.
4. Sub-processors and storage
| Processor | Purpose | Data | Location |
|---|---|---|---|
| CosmoOps Connect | Identity, workspace membership, sign-in, billing and the provisioning of this application's database. | Account details, workspace role, stored records. | India (Mumbai) |
| Google Cloud Platform (Firestore, Cloud Storage) | The database and file store used by Contracts alone. | Contracts, versions, counterparties, contacts, obligations, signatures and uploaded documents. | India (Mumbai, asia-south1) |
| Amazon Web Services (SES) | Signing and negotiation invitations, one-time codes, reminders and alerts by email. | Recipient email addresses and the message. | India / Asia-Pacific |
| Razorpay | Payment for subscriptions. | Billing name, GSTIN, invoice identifiers and payment status. | India |
AI review, when a workspace uses it, sends the contract text to the platform's AI service for that request only.
5. Retention
Records are kept for as long as the workspace keeps them. Signed versions and signing audit trails are append-only - they cannot be edited, because their value as evidence depends on it - and are kept with the contract. When a workspace is deleted through CosmoOps Connect, its Contracts data is erased with it.
6. Your rights
You may ask for access to, correction of or erasure of your personal data, and nominate someone to act for you. If you are a counterparty or signer, the workspace you dealt with holds your data and is the first place to ask; we will help them answer.
7. Grievance officer
The platform's own notice is at CosmoOps Connect privacy.