FurnishiHome Data processing
Data processing agreement — summary
What Furnishi does with the personal data a factory puts into the platform, and the commitments that sit behind it.
| Item | Position |
|---|---|
| Roles | The factory is Data Fiduciary. Furnishi is Data Processor and processes only on documented instruction. |
| Categories of data subject | Factory staff, partner firm staff, and the factory's own customers (homeowners). |
| Categories of personal data | Name, mobile number, email, installation address, order and service history, site photographs and video, digital signature. |
| Special category data | None collected. No Aadhaar, no financial account numbers, no health data. |
| Purpose | Operating the installation management service for that factory. |
| Duration | The subscription term, plus the retention period in the agreement. |
| Sub-processors | Cloud infrastructure and transactional communication providers, all with data located in India. Current list on request; 30 days notice of change. |
| Transfers | None outside India. |
| Security measures | Row-level tenant isolation, field-level access control, encryption in transit and at rest, audit logging, least-privilege staff access, logged impersonation. See Security. |
| Breach notification | Notification to the factory without undue delay and in any case within 48 hours of becoming aware, with the facts known at that point. |
| Audit rights | Annual, on reasonable notice, subject to confidentiality. Security documentation provided under NDA. |
| Assistance | Furnishi assists the factory in responding to data-principal requests and to the Data Protection Board. |
| Deletion | On termination, full export then deletion on the agreed schedule, including from backups on their rotation cycle. |
Summary, not the contractThis page summarises the DPA for readability. The executed
agreement governs, and must be reviewed by counsel before it is offered to customers.
Need the full DPA and security pack?
We will send both under NDA, including the questions where our honest answer is 'not yet'.