Data processing terms

Last updated: 19 October 2026

These terms form part of the terms of use. They apply when you (the business, creator or agency) use Proofloop to handle personal data of your customers, leads, clients or brand contacts. For that data you are the Data Fiduciary and NewScaler is your Data Processor under the Digital Personal Data Protection Act, 2023.

What we do

1. Only on your instructions. We process your customers' data only to run the Proofloop features you use, as you set them up, and never for our own purposes, advertising or AI training.
2. Confidentiality. Only people who need it to run or support Proofloop can reach it, under a duty of confidentiality.
3. Security. We keep reasonable security safeguards: encryption of stored tokens, keyed hashing of IP addresses, HTTPS everywhere, limited access to production, and logs to detect misuse.
4. Other processors. We use the providers listed below, each only for the purpose shown. We will list any new one here before it starts processing your customers' data; if you object, you may close your account.
5. Helping you with requests. You can find, export, correct and delete your customers' data in the dashboard. If one of your customers writes to us, we pass the request to you and help you answer it.
6. Breaches. If a breach affects your customers' data, we tell you without undue delay, and within 48 hours of confirming it, with what we know, so that you can notify them and the Data Protection Board.
7. Deletion. When you delete a contact, a product or your account, the data is erased from our database at once and from backups within 30 days, except records the law requires us to keep.
8. Information. On reasonable request we give you the information you need to show you meet the DPDP Act for data Proofloop processes.

What you do

• Give your customers a notice of what you collect and why, and get their consent where the law needs it (for example before messaging them outside a conversation they started).
• Honour STOP, and requests to see, correct or delete their data.
• Do not use Proofloop to collect data from children.
• Only add data you are allowed to use.

Our providers (sub-processors)