Data processing agreement

Roles

Once your product is live, your business decides what personal data it holds. Bananabytes processes that data only to host, run and improve your product, on your instructions.

During the build

The crew builds and tests with made-up data only. No real personal data is used before you go live.

Location and security

Your product's data is stored in India for Indian customers and in the US for US customers.

Each customer gets a separate workspace. No other customer's files or keys can be seen in it.

Sub-processors

Hosting (Vercel), database (Supabase), email (Resend), payments (Razorpay, Stripe) and AI models (Anthropic). PLACEHOLDER: full list with regions to be confirmed.

Handover and deletion

When you move to your own accounts, or the agreement ends, we hand over and then delete our copies within 30 days, unless the law requires us to keep them.