Data Processing Addendum

Last updated: 21 June 2026

This is a starting template and not legal advice. Have it reviewed by qualified counsel before relying on it in production.

This Data Processing Addendum (“DPA”) forms part of the agreement between you (“Controller”) and DWET PVT LTD (“Processor”) for the processing of personal data through Setu.

1. Roles

You are the Controller of personal data you submit. We act as Processor, processing it only on your documented instructions.

2. Scope of processing

• Subject matter: provision of the Setu API and platform.
• Duration: for the term of your subscription.
• Data subjects: your end users and personnel.
• Data types: identifiers, content submitted to the API, and usage metadata.

3. Sub-processors

We engage vetted sub-processors (hosting, payments) under written contracts with equivalent protections. A current list is available on request.

4. Security

We implement appropriate technical and organizational measures, including encryption in transit, access controls and audit logging. See our Security page.

5. International transfers

Where data is transferred across borders, we rely on appropriate safeguards consistent with applicable law.

6. Data subject requests & breach notification

We assist you in responding to data-subject requests and will notify you without undue delay upon becoming aware of a personal data breach.

7. Deletion

On termination, we delete or return personal data in accordance with our retention policy and applicable law.

Contact

To execute a signed DPA, contact legal@dwet.ai.