Data-processing agreement

Version 2026-10 · in force from 24 October 2026. Part of the Business terms, under the Digital Personal Data Protection Act, 2023.

How Rise handles the shop and merchant data it collects for your business.

1. Roles

For personal data of shop owners and other people your missions reach ("merchant data"), you are the data fiduciary and Rise is your data processor. For data about Risers and your own users, Rise is a data fiduciary under its Privacy policy.

2. What Rise processes for you

Shop and owner names, phone numbers, addresses and locations, GSTINs, photos and videos taken for the task, answers to your mission's questions, and the owner's confirmation and consent record. It is collected by Risers through the Rise app, or uploaded by you.

3. Only on your instructions

Rise uses merchant data only to run your missions, check tasks, show you results and meet legal duties. Rise does not sell it or use it for other businesses' missions.

4. Consent

You are responsible for having a lawful basis for your missions. At each visit the owner confirms on their own phone, on a page naming your business, and that confirmation is recorded as their consent.

5. Who sees it

Rise staff who need it; the Riser doing the task, limited to what the task needs; and Rise's service providers listed in the Privacy policy (hosting in India, email delivery, maps, GST lookup), each bound to confidentiality.

6. Security

Data is encrypted in transit; bank details and similar fields are encrypted at rest; access is by role and logged; backups are taken daily and kept for 30 days.

7. Breaches

Rise tells you without undue delay, and within 72 hours, of a personal data breach affecting your merchant data, with what is known and what Rise is doing, so you can notify the Data Protection Board and the people affected.

8. People's requests

Rise helps you answer access, correction and erasure requests: you can export your merchant data or delete a merchant from the portal at any time.

9. When you leave

Within 30 days of the end of the service, Rise deletes or returns your merchant data, except what the law requires it to keep (for example tax records), which is kept only for that purpose.

10. Audit

Rise answers reasonable written questions about its processing once a year, or after a breach.

Other documents: Rise terms · Business terms · Data-processing agreement · Privacy policy