Data Processing Addendum
Autom8 Works · autom8.works · Last updated 7 October 2026
This addendum is part of the Terms of Use between Autom8 Works (“processor”) and the business that subscribes to Autom8 (“controller”).
1. Laws
The processor handles personal data under applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Where the GDPR applies to a particular customer, the processor follows its principles for that processing.
2. What is processed
| Item | Detail |
|---|---|
| Subject | WhatsApp orders, packing and shipping updates, GST billing, and enquiries from IndiaMART or Justdial, for a retail or food-product brand. |
| Nature | Collect, store, and send order and enquiry data between WhatsApp and the tools the controller connects. |
| People | The controller’s customers and the people who enquire through a connected portal. |
| Data | Name, mobile number, delivery address, order lines, payment status, tracking, message content, and enquiry text. |
3. Instructions
The processor uses that data to provide Autom8 and on the controller’s written settings in the product, including which store, payment method, courier, books, portal, or webhook URL is connected. The processor does not sell the data and does not use it for its own marketing to those end customers.
4. Sub-processors
The controller agrees that Autom8 uses:
- Meta Platforms, Inc., for the WhatsApp Business API.
- The cloud infrastructure provider that hosts Autom8.
Autom8 remains responsible for those sub-processors meeting this addendum. Shopify, WooCommerce, Razorpay, PhonePe, Shiprocket, Zoho Books, Tally, IndiaMART, Justdial, and a webhook URL are the controller’s own accounts. Data goes there only because the controller connected them.
5. Breach
If Autom8 becomes aware of a personal-data breach affecting the controller’s data, Autom8 will notify the controller without undue delay and within 72 hours of becoming aware, with enough detail for the controller to meet its own notice duties, and will take reasonable steps to limit the damage.
6. End of service
When the subscription ends, Autom8 will delete or return personal data at the controller’s choice, unless the law requires Autom8 to keep it, including records needed for tax.
7. Contact
Email ravi@autom8.works.