Data Processing Agreement

The Merchant decides why and how Buyer Data is used and is its controller (data fiduciary). Alpha Jungle processes Buyer Data only on the Merchant's documented instructions, as a processor. Connecting a store, a WhatsApp number or a Razorpay account, and setting up flows, templates and messages in the Platform, are the Merchant's instructions.

Buyer Data may include a buyer's name, WhatsApp phone number, email address, shipping and billing address, order details (items, totals, payment, fulfilment and delivery status, tracking links), payment link status, and the content and delivery status of WhatsApp messages exchanged with the Merchant's number.

Alpha Jungle uses Buyer Data only to provide the Platform to the Merchant: to send and receive the Merchant's WhatsApp messages, show orders, contacts and conversations in the Merchant's workspace, create payment links the Merchant requests, and keep the service running and secure. Alpha Jungle does not sell Buyer Data, use it for its own marketing or advertising, build profiles of buyers, or share it with other merchants.

The Merchant confirms that it has a lawful basis, and the consent required by WhatsApp's policies and applicable law, to message its buyers on WhatsApp; that it honours buyers' opt-outs; and that its instructions to Alpha Jungle comply with applicable law.

Only Alpha Jungle staff who need access to provide or support the Platform may access Buyer Data, and they are bound by confidentiality obligations.

Alpha Jungle maintains appropriate technical and organisational measures to protect Buyer Data, including encryption in transit (HTTPS/TLS) and at rest (including backups), additional encryption of store, WhatsApp and payment access keys, access to production systems limited to authorised staff using two-factor sign-in, separation of development and production systems, and an incident response process. A summary of our security measures is available on request.

The Merchant authorises Alpha Jungle to use the following sub-processors:

Alpha Jungle will tell the Merchant by email before adding or replacing a sub-processor. The Merchant may object; if the objection cannot be resolved, the Merchant may close its account.

Alpha Jungle is based in India and the Platform runs in India. Some sub-processors, including Meta and Supabase, may process Buyer Data outside India, under their own compliance frameworks and contractual safeguards.

Alpha Jungle will notify the Merchant without undue delay, and in any case within 72 hours of becoming aware, of a personal data breach affecting Buyer Data, with the information then known, the likely consequences and the steps being taken. Alpha Jungle will reasonably help the Merchant meet its own notification obligations.

Alpha Jungle will help the Merchant respond to buyers' requests to access, correct or delete their personal data. Alpha Jungle acts on deletion requests forwarded by the store platform, including Shopify's customer data and shop data deletion requests, and confirms them to the Merchant on request. If a buyer contacts Alpha Jungle directly, we will pass the request to the Merchant.

Buyer Data is retained as described in the Privacy Policy. Store orders and the buyer details in them are deleted 365 days after the order last changed. When the Merchant closes its account or this Agreement ends, Alpha Jungle deletes the Merchant's Buyer Data within 30 days, unless the law requires it to be kept.

On reasonable written request, Alpha Jungle will provide the Merchant with the information needed to show compliance with this Agreement.

This Agreement applies for as long as Alpha Jungle processes Buyer Data for the Merchant, and continues to apply to any Buyer Data retained after that.

Alpha Jungle may update this Agreement to reflect changes in its practices or applicable law, and will tell Merchants by email before material changes take effect. The "Last updated" date shows the current version.

This Agreement is governed by the laws of India, including the Digital Personal Data Protection Act, 2023. The courts of Ludhiana, Punjab, India have exclusive jurisdiction.

The Merchant accepts this Agreement by creating a JungleFlow account, connecting a store, or continuing to use the Platform.

Grievance Officer, Hari Dass Sachdeva, hari@alphajungle.co