Data Processing Terms

Last updated: 24 October 2026 · V Legal Services — proprietorship of Suresh Kumar R · GSTIN 33EWCPS3401P2ZA · D No 2A4, SF No 419/2, Annai Indra Nagar, Maruthamalai, Coimbatore – 641046, Tamil Nadu

These Data Processing Terms apply when a business client — for example a builder, promoter, developer, DSA or loan agent ("Client") — uses the client portal of V Legal Services ("V Legal") to store or share personal data of the Client's own customers or other individuals ("Client Personal Data"). They form part of our Terms of Service.

1. Roles

For Client Personal Data that the Client uploads and controls, the Client is the Data Fiduciary and V Legal is the Data Processor within the meaning of the Digital Personal Data Protection Act, 2023. For personal data V Legal collects for its own purposes (for example, the Client's account and billing data), V Legal is the Data Fiduciary under our Privacy Policy.

2. Client's responsibilities

1. The Client confirms that it has a lawful basis (including any required notice and consent) to collect Client Personal Data and to share it with V Legal for the services requested.
2. The Client will upload only what is necessary, prefer masked Aadhaar, and keep its staff logins and their project access up to date.
3. The Client is responsible for answering requests from its own customers to exercise their rights; V Legal will assist as described below.

3. V Legal's commitments

1. Instructions. V Legal processes Client Personal Data only to provide the portal and the services the Client requests, and as required by law.
2. Confidentiality. Only personnel who need access to perform the services can access Client Personal Data, and they are bound to confidentiality.
3. Security. V Legal maintains reasonable security safeguards, including encryption in transit and at rest, role-based access, logging and backups, as described in the Privacy Policy.
4. Sub-processors. V Legal uses the service providers listed in the Privacy Policy (including Supabase Inc. for database and storage, located in Mumbai, India). V Legal remains responsible for them and will update the list on the website before adding a new provider that stores Client Personal Data.
5. Breach notification. V Legal will inform the Client without undue delay, and in any case within 24 hours of becoming aware of a personal data breach affecting Client Personal Data, with the information available, so that the Client can meet its own notification duties.
6. Assistance. V Legal will help the Client, at reasonable cost if significant effort is needed, to respond to requests from individuals and from the Data Protection Board of India.
7. Deletion and return. When the account closes, the Client can export its documents for 30 days; V Legal then deletes Client Personal Data, except records it must keep by law.
8. Records. V Legal will provide information reasonably needed to show compliance with these terms, on written request.

4. Liability

Each party is responsible for its own compliance with data protection law. Liability under these terms is subject to the limits in the Terms of Service, except where the law does not allow such a limit.

Related policies