Data Processing Agreement (DPA)

Last Updated: 14 October 2026

This Data Processing Agreement (“Agreement”) forms part of the Terms of Use between:

Service Provider / Processor:
YVDO SOLUTIONS Private Limited, Delhi, India
Customer / Data Controller:
The subscribing organization.

This Agreement governs the processing of personal data by IDPro.

1. Roles of the Parties

For the purposes of this agreement:

  • The Customer (Institute) acts as the Data Controller.
  • YVDO SOLUTIONS Private Limited (IDPro) acts as the Data Processor.

The Customer determines:

  • What data is collected
  • How it is used
  • How long it is stored

The Processor processes the data only on behalf of the Customer.

2. Scope of Processing

The Processor processes personal data only to provide the Services including:

  • Identity verification
  • QR ID card generation
  • Event access management
  • Attendance logging
  • Reporting and analytics

The Processor will not process data for unrelated purposes.

3. Types of Data Processed

Data may include:

  • Name
  • Email
  • Phone number
  • Student/employee ID
  • QR code identifiers
  • Entry/attendance logs
  • Event participation data

Sensitive personal data should not be uploaded unless permitted by law.

4. Security Measures

The Processor implements reasonable technical and organizational security measures including:

  • Encrypted connections (HTTPS)
  • Access control
  • Monitoring and logging
  • Secure hosting environments

5. Sub-Processors

The Processor may use trusted third-party service providers including:

  • Hosting providers
  • Cloud infrastructure
  • Email delivery services

All sub-processors are required to comply with applicable data protection obligations.

6. Data Breach Notification

If a data breach occurs, the Processor will:

  • Notify the Customer without undue delay
  • Provide information required for investigation
  • Assist in mitigation where reasonably possible

7. Data Deletion

Upon termination of service:

  • Customer may request deletion of stored data.
  • Data will be deleted or anonymized unless retention is legally required.

8. Liability

Each party is responsible for compliance with applicable data protection laws. The Processor shall not be responsible for unlawful collection or misuse of personal data by the Customer.