FrogBillThis addendum is part of our terms and conditions. It applies to personal data about your own customers and contacts that you (the “Business”) put into FrogBill. For that data, the Business is the data fiduciary (controller) and SHARON V, a sole proprietor trading as FrogBill, of Sreenidhi, Kalluvalap, Cheruvanchery, Kerala 670650, India (“FrogBill”) is its data processor.
1. What’s covered
- Data: names, company names, email addresses, phone numbers, postal addresses, tax registration numbers, and details on quotations, invoices and payments.
- People: the Business’s customers and their contact persons, and the Business’s team members.
- Purpose: only to provide FrogBill to the Business — storing, displaying, sharing documents when the Business asks, making PDFs, backups and security.
- Duration: while the Business’s account is open, and deletion afterwards as set out below.
2. The Business’s responsibilities
The Business confirms it has a lawful basis (such as consent or a contract) to enter and share its customers’ data, gives any notices the law requires, and handles requests from its own customers about their data.
3. FrogBill’s commitments
- Process the data only on the Business’s documented instructions — which are given by using FrogBill’s features — unless the law requires otherwise.
- Keep it confidential, and make sure anyone who can access it is bound to confidentiality.
- Protect it with reasonable security safeguards, including encryption in transit, separation of each business’s data, access controls and backups.
- Not sell it, and not use it for our own purposes, advertising or AI training.
- Help the Business respond to its customers’ requests to access, correct or erase their data, and with data protection questions.
- Tell the Business without undue delay, and within 72 hours of becoming aware, of a personal data breach affecting its data.
4. Sub-processors
The Business authorises FrogBill to use these sub-processors, each under a duty to protect the data: DigitalOcean (hosting and backups, Bangalore, India), our email provider (delivering emails the Business sends through FrogBill, such as invitations), a PDF rendering service running on our own server, Meta (delivering WhatsApp messages, only if the Business switches them on) and Sentry (technical error reports, Germany). We’ll update this list and tell businesses before adding a new sub-processor, so they can object by closing their account.
5. Location
The data is stored in India. It is not transferred outside India except as the DPDP Act allows and after telling the Business. When the Business switches on WhatsApp messages, its customers’ mobile numbers and the messages go to Meta to be delivered.
6. Return and deletion
The Business can download its documents as PDF at any time, and its lists as CSV on plans that include exports; on request, FrogBill will provide a copy of the Business’s data. When the Business closes its account, FrogBill deletes the data within 90 days, and backups containing it are overwritten within a further 30 days, unless the law requires us to keep something longer.
7. Information
On reasonable request, FrogBill will give the Business the information it needs to show it has met its obligations for this data.