Legal
Data Processing Addendum
Last updated 17 September 2026
How we process personal data on your behalf, and what we commit to.
1. Roles
For the data you put into WON about your own employees, customers and job workers, you are the data fiduciary (controller) and YantrAdhigam Labs Pvt Ltd is the data processor. For your own account data, we are the controller.
2. What we will and will not do
We process personal data only on your documented instructions, which for ordinary use means: operating the service. We will not process it for any other purpose.
3. Confidentiality and security
Everyone with access is bound by confidentiality obligations. The technical measures are set out on our data security page and form part of this addendum.
4. Sub-processors
We use the sub-processors listed on our sub-processors page. We will give 30 days' notice before adding one, and you may object.
5. Breach notification
If personal data you control is breached, we will tell you without undue delay and in any case within 72 hours of becoming aware, with what we know at the time, not once the investigation is finished.
6. Assistance and audit
We will help you answer data-subject requests and complete impact assessments. You may audit our compliance once a year on reasonable notice, or accept a current third-party report in place of that.
7. Deletion
On termination we delete or return personal data within 30 days, except where law requires us to keep it.