Roles
Your organisation is the controller of workspace content. Soor LLC is its processor. This addendum forms part of the terms of service and applies for as long as we process that content.
Instructions
We process workspace data only to provide TaskSiddhi and on your documented instructions, including about international transfers, unless the law requires otherwise — in which case we will tell you before we process, unless that law forbids it.
Confidentiality
Access is limited to the people who need it to run or support the service, each of them under a duty of confidence.
Security
Row-level security in the database keeps each workspace's rows apart, and privileged database helpers are not callable by the public or anonymous roles. Traffic is encrypted in transit. An activity log is written by the database, and you can export it for any date range.
Sub-processors
You give general authorisation for the sub-processors listed on the sub-processors page. We will give at least 30 days' notice before adding one, and you may object on reasonable data-protection grounds; if we cannot resolve the objection you may terminate and take an export.
Breach notification
We will notify you of a personal data breach affecting workspace content without undue delay, and in any event within 72 hours of becoming aware of it, with what we know at the time and what we are doing about it. Further detail follows as we have it.
Helping you
We will help you answer a data-subject request, carry out a data-protection impact assessment, and deal with a regulator, so far as the request relates to data we hold for you. The product's own export and deletion controls are the first route; where they are enough, use them rather than writing to us.
Audit
We will give you the information you reasonably need to show that this addendum is being met, and will contribute to an audit on reasonable notice, no more than once a year unless a regulator or a breach requires another.
International transfers
Processing happens in the United States. Where a transfer mechanism is required we rely on the European Commission's standard contractual clauses and the UK addendum to them, and we flow the same obligations down to our sub-processors.
Return and deletion
Export your boards to CSV or Excel at any time, up to 10,000 rows per export.
Take your export before you terminate, while you can still sign in. After termination we delete workspace content within 30 days, except where the law requires us to keep it, and backups holding it age out within 90 days.
