Data Processing Addendum — SignReady

Between the firm using SignReady ("the firm") and Brainy Accountant Solutions Pvt Ltd ("PracticeGuru"). Version 1.1, effective 1 October 2026. This addendum forms part of the Terms of Use.

1. Roles and scope

For the personal data in the client information the firm uploads or enters (for example names of directors, partners, related parties and parties in ledgers), the firm decides the purpose and means of processing, and PracticeGuru processes it on the firm's behalf to provide SignReady.

2. Instructions

PracticeGuru processes client data only to provide SignReady as the firm uses it (the firm's instructions), to keep the service secure, and where the law requires. It does not use client data for its own purposes, for advertising or to train AI models.

3. The firm's responsibilities

The firm confirms it has the notices, consents, permissions and authority needed to upload its clients' data and to give access to the people it invites, and it is responsible for their use of that access.

4. Confidentiality and security

PracticeGuru limits access to client data to personnel who need it to operate or support the service and who are bound by confidentiality, and it maintains reasonable technical and organisational safeguards (HTTPS, non-public storage, access checks on every request, deletion of client data when the firm deletes it or its plan lapses).

5. Service providers (sub-processors)

PracticeGuru uses a hosting provider (servers and storage), Amazon Web Services (storage of workings attached to finalisations, in the Mumbai, India region, encrypted), an email delivery provider and Razorpay (payments; no client data). It requires them to protect data and to use it only to provide their service. The current list is available on request, and material changes are notified as set out in the Terms.

6. Personal data breach

If PracticeGuru becomes aware of a breach affecting the firm's client data, it will inform the firm without undue delay with the information available, and help the firm meet its obligations to inform affected people and authorities.

7. Requests from individuals

If PracticeGuru receives a request about a client's data, it will pass it to the firm. SignReady lets the firm correct data and delete a finalisation or all its client data itself; PracticeGuru will reasonably help with requests it cannot handle in the app.

8. Deletion and return

The firm can download its outputs and delete data at any time. Client data is deleted as set out in the data retention policy, including 180 days after a plan ends without renewal, except where the law requires records to be kept (for example payment and tax records).

9. Contact

Sachin Mohite · [email protected]