Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") is an agreement between Stallion Cognitive, a trademark of BNCW Enterprises OPC Private Limited ("Stallion Cognitive") and the client ("Client"). This DPA forms part of the terms and conditions governing the services provided by Stallion Cognitive™ to the Client.

Types of Data Processed

Stallion Cognitive™ will process the following types of personal data on behalf of the Client:

Personal data such as names, email addresses, and other contact information.
Payment information stored with Stripe, Payoneer, PayPal, Razorpay and Wise.

Data Processing Activities

Stallion Cognitive™ will engage in various data processing activities, including but not limited to data storage, analytics, and other services required for fulfilling the contract with the Client.

Data Storage

Data is stored across offline servers, cloud storage, and online servers.
Payment information is stored by Stripe and not directly by Stallion Cognitive™.
Data is retained for the duration of the contract and for an additional 90 days after termination unless specified otherwise.

Data Security

Stallion Cognitive™ employs various security measures, including encryption, access controls, and regular security audits. These are implemented both manually and via third-party software to ensure the protection of personal data.

Third-Party Processors

Stallion Cognitive™ uses the following third-party services for data processing:

Stripe for payment processing.
Umami Analytics for website analytics.
Other third-party services used by Stallion Cognitive™ will be disclosed to the Client upon request, for security reasons.

Data Subject Rights

Data subjects may exercise their rights (e.g., access, deletion requests) by contacting Stallion Cognitive™ via the website or email.

Data Breach Response

In the event of a data breach, Stallion Cognitive™ has a disaster recovery plan, emergency backups, and other recovery software in place to respond promptly and effectively.

Legal Compliance

Stallion Cognitive™ works exclusively with clients in the USA. While data is received in India, Stallion Cognitive™ will comply with relevant U.S. data protection laws if absolutely necessary, but will not classify data hosted on U.S. servers unless legally required.

International Data Transfers

Data is primarily stored on U.S.-based client servers. However, since Stallion Cognitive™ operates from India, data may be transferred internationally. Compliance with U.S. data protection laws is maintained unless legally required otherwise.

Client Responsibilities

Stallion Cognitive™ provides clients with safety protocols and guidelines and expects them to follow these diligently. Stallion Cognitive™ is not responsible for any data breaches or security issues resulting from the client's negligence or failure to adhere to these protocols.

Data Retention and Deletion

Data is retained until all outstanding bills are paid. Afterward, a copy is provided to the client, and the data is retained for an additional 90 days for potential future needs. After this period, the data is permanently deleted with no possibility of recovery. Post-termination, Stallion Cognitive™ is not obligated to provide any backup of the data.

Contacting Us

If you would like to contact us to understand more about this agreement or wish to contact us concerning any matter relating to it, you may contact us at [email protected]

This document was last updated on February 07, 2025