Data Processing Addendum (DPA)

Scope of Processing

This Data Processing Addendum (DPA) governs how EventFlowHub.io processes customer data on behalf of the workspace owner (the data controller). It applies to all operational data handled by the platform while the subscription is active.

Nature of Data

The platform processes the categories of data necessary to operate event workflows on behalf of the workspace.

Operational data — workspace settings, branding, and configuration.
Event data — briefs, schedules, approvals, and execution records.
Vendor records — contacts, rate cards, purchase orders, and confirmations.
Proposal approvals — client-facing estimates, share tokens, and decisions.
Communication metadata — notification delivery records and audit-relevant events.

Security Measures

EventFlowHub.io operates a layered security model. Each measure is designed to keep customer data isolated, observable, and recoverable.

Row Level Security (RLS)

Policy-enforced data access at the database layer.

Tenant Isolation

Strict per-workspace boundaries across every domain.

Encrypted APIs

All client and service traffic encrypted in transit.

Access Logging

Sensitive operations recorded to the audit trail.

Permission Control

Role-based controls govern workspace actions.

Secure Infrastructure

Hardened cloud infrastructure with monitoring.

Subprocessors

EventFlowHub.io engages a limited set of subprocessors strictly required to operate the platform.

Cloud hosting — managed infrastructure for compute, storage, and database services.
Authentication — secure identity, session, and OAuth providers.
Communication infrastructure — transactional email, in-app delivery, and WhatsApp messaging.

All subprocessors are contractually bound to confidentiality and appropriate security obligations.

Customer Responsibilities

Maintaining the accuracy and lawful basis of data uploaded to the workspace.
Managing workspace membership, roles, and permission boundaries.
Configuring branding, retention, and notification preferences appropriately.
Promptly reporting any suspected security incidents observed in the workspace.

Incident Notification Policy

We notify without delay

In the event of a confirmed personal-data incident affecting customer workspaces, EventFlowHub.io will notify affected workspace owners without undue delay, with information on scope, impact, and remediation steps.

Data Deletion Requests

Workspace owners may request deletion of workspace data at any time through the published support channel. Deletion is performed within a defined window across active systems, subject to legal retention obligations applicable to billing and audit records.

International Processing

Customer data may be processed in cloud regions selected for performance, reliability, and compliance. Where data crosses jurisdictions, EventFlowHub.io relies on appropriate safeguards with its subprocessors.

Compliance Commitment

Operationally secure by design

EventFlowHub.io is designed with operational security and tenant data isolation principles. Architecture, access control, and audit capabilities are continually evolved to support the compliance needs of enterprise customers.

Contact for DPA Requests

For DPA execution, security questionnaires, or processing inquiries, contact the EventFlowHub.io team directly.

Contact

support@eventflowhub.io

BTL INFOS

9th Floor, Block D3,
Manyata Tech Park Rd,
Manyata Tech Park,
Thanisandra,
Bengaluru – 560045,
Karnataka, India.