# Data Processing Agreement

Last updated: October 2026

This agreement forms part of our Terms of Service (https://nobusyness.com/terms/) and applies whenever your noBUSYness agent handles personal data for your business. If you need a signed copy, email info@nobusyness.com.

## 1. Parties and roles

You, the client, are the controller. Balmon Ventures Pvt Ltd, Mumbai, India (CIN U47711MH2025PTC438067), trading as noBUSYness, is the processor.

## 2. What we process

- Subject matter: messages and related details from your customers, leads and contacts, handled by your AI agent.
- People: your customers, prospects and contacts, and your staff who use the dashboard.
- Data: names, contact details (phone numbers, email addresses, social handles), message content, booking, order and enquiry details, and anything else people choose to share in their messages.
- Sensitive data: only where your type of business involves it, such as health. In that case your agent uses only AI models whose providers don’t keep the data.
- Duration: for as long as you use the service, plus the return and deletion period below.

## 3. Purpose and instructions

We process personal data only to run your agent: answering messages, capturing leads, sending reminders and follow-ups, preparing briefings and showing your dashboard. We act only on your documented instructions, which are our Terms, your onboarding form and your written requests.

## 4. Confidentiality

Everyone at noBUSYness who can access your data is bound by confidentiality.

## 5. Security

Each agent runs on its own private server. Access is limited to the people who need it, connections are encrypted, we use app passwords and tokens instead of your main account passwords, and we keep regular backups.

## 6. Sub-processors

- Your agent’s private server (VPS) host, named in your onboarding pack. EU hosting is available.
- OpenRouter, and the AI model providers it routes your agent’s requests to.
- Zernio, for social account connections.
- Composio, for connections to your other apps.

The platforms you connect, such as WhatsApp, Meta, Telegram, Google, Apple and your email provider, process data under their own terms with you. We tell you before we add or replace a sub-processor, and you can object.

## 7. International transfers

Data may be processed in India and in the countries where our sub-processors operate. EU hosting is available. Where the law requires it, we sign the European Commission’s Standard Contractual Clauses with you.

## 8. Helping you

We help you answer requests from people exercising their data rights, and with security and data protection questions, as far as we reasonably can.

## 9. Personal data breaches

We tell you without undue delay, and within 72 hours of becoming aware of a breach that affects your data, with what we know and what we are doing about it.

## 10. Return and deletion

When the service ends, we return your data in a common format if you ask, and delete it from our systems within 30 days, unless the law requires us to keep it. Backups are overwritten in their normal cycle.

## 11. Audits

On request, we give you the information you reasonably need to show that this agreement is being followed.

## 12. Governing terms

Liability, governing law and disputes follow our Terms of Service (https://nobusyness.com/terms/).