Data Processing Agreement (DPA)

Last updated: April 21, 2026

This Data Processing Agreement ("DPA") forms part of the Terms of Service, or other written or electronic agreement between Langslide ("Data Processor") and You ("Data Controller") for the purchase of online services from Langslide.

Langslide understands the importance of protecting the privacy and security of your personal data. This DPA establishes the terms and conditions under which Langslide processes your data, ensuring full compliance with prevailing international data protection laws, including the GDPR and CCPA.

1. Definitions

"Data Controller" means the natural or legal person who determines the purposes and means of the processing of Personal Data.

"Data Processor" means Langslide, which processes Personal Data on behalf of the Controller.

"Data Protection Officer (DPO)" is the designated representative responsible for overseeing data protection strategy and implementation.

2. Data Processing Details

Langslide will process Personal Data strictly in accordance with the Data Controller's documented instructions and to the extent necessary to provide the Services. We will not process Personal Data for any other purpose unless legally required to do so.

3. Data Subject Rights

Langslide shall, to the extent legally permitted, promptly notify the Data Controller if it receives a request from a Data Subject to exercise their rights (including access, rectification, restriction of processing, erasure, data portability, object or not to be subject to automated decision-making).

To better understand these rights, please refer to our Privacy Policy.

4. Authorized Sub-Processors

To optimally provide our Services, Langslide engages the following third-party entities ("Sub-processors") to process Personal Data. We impose data protection terms on these Sub-processors that are no less protective than those contained in this DPA:

Sub-Processor NameLocation / HostingPurpose of Processing
Google LLCUnited States / GlobalGoogle Cloud & Workspace APIs for cloud infrastructure and operations.
Razorpay Software Private LimitedIndia / GlobalSecure payment processing and financial transaction facilitation.
Box, Inc.United States / GlobalContent management to store, host, and fetch generalized media/assets and cloud content natively.
MongoDB, Inc.United States / GlobalFoundational data persistence layer for tracking Auth, Workspaces, and usage limits.

5. Security Measures (Technical and Organizational)

To ensure the protection of Personal Data against unauthorized access, loss, or destruction, Langslide maintains a robust security posture detailing:

  • Encryption: All Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
  • Access Control Policies: Role-Based Access Control (RBAC), mandatory MFA, and strict principle of least privilege applied internally.
  • Data Breach Notification: We commit to notifying the Data Controller of any applicable data breach without undue delay, and no later than 48-72 hours following detection.

6. Standard Contractual Clauses (SCCs)

Due to our use of Sub-processors in the United States and India, Langslide occasionally engages in cross-border data transfers. For Users operating within the European Union (EU) or EEA, the EU Standard Contractual Clauses (SCCs) are hereby incorporated by reference into this DPA, ensuring these transfers remain legally compliant under GDPR.

7. Data Deletion and Return

Upon termination of our services and your contract, the Processor will, at the choice of the Controller, securely delete or return all Personal Data, unless domestic or international law explicitly requires continued storage.

8. Audit Rights

To guarantee full transparency and compliance, Langslide grants the Data Controller the right to audit our compliance. Upon reasonable written request, we will provide evidence of our compliance and security measures, or allow you to verify our independent third-party audits (e.g., SOC 2 compliance mapping) without compromising the security of other clients.

9. Data Protection Officer (DPO) Contact

Langslide has appointed a Data Protection Officer to oversee our compliance with global data protection protocols and to serve as your primary point of contact for any privacy inquiries.

DPO Name:Data Protection Officer (Privacy Team)
Email Address:dpo@langslide.ai