Terms of Service

8.1 Roles of Parties: For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Company acts as a Data Fiduciary for personal data of registered users, and as a Data Processor for personal data of third-party clients uploaded or entered by users into the platform.

8.2 User Obligations (Data Fiduciary Duties): When users upload, store, or process personal data of their clients or end-users on Helium Suite:

• User warrants that it has obtained prior, free, specific, informed, unconditional, and unambiguous consent from data principals per Section 6 of the DPDP Act.
• User assumes full legal liability as a Data Fiduciary for the lawful collection of client data uploaded to the platform.
• User shall promptly notify Company of any consent withdrawal or erasure requests received from client data principals.

8.3 Technical & Organizational Safeguards: Company shall implement reasonable security safeguards per Section 8(5) of the DPDP Act, including encryption at rest and in transit, strict access control, and routine audit logging.

8.4 Personal Data Breach Notification: In the event of a personal data breach affecting platform data, Company shall notify the Data Protection Board of India and affected users without undue delay, in accordance with applicable DPDP Act regulations and CERT-In directives.

8.5 Cross-Border Data Processing: Personal data is processed in compliant data centers and cloud services. Company shall adhere to any government notifications restricting cross-border transfers under Section 16 of the DPDP Act.