Data Processing Agreement (DPA)

This Data Processing Agreement applies where an organization — for example a farming cooperative, research institution, NGO or government agency (the "Customer") — uses the MatoSense platform and Heisenberg Engineering Pvt. Ltd. ("we", the "Processor") processes personal data on the Customer's behalf. It supplements our Terms and Conditions and Privacy Policy.

1. Roles

The Customer is the data controller: it decides which users are onboarded, which devices are assigned to whom, and how soil data is used. We act as the data processor, processing personal data only to provide the platform and related support.

2. Scope of processing

• Data subjects — the Customer's staff, members, farmers and field technicians with platform accounts.
• Personal data — names, email addresses, phone numbers, roles, and device assignments.
• Associated data — soil sensor readings (pH, NPK, moisture, temperature, EC), field and land-area records, and audit logs of platform activity.
• Purpose — operating the soil data platform: dashboards, history, exports, access control and support.

3. Our obligations as processor

• Process personal data only on the Customer's documented instructions and for the purposes above;
• Ensure personnel with access to data are bound by confidentiality;
• Apply appropriate technical and organizational measures: encrypted transport (HTTPS), hashed credentials, role-based access control, and append-only audit logging;
• Notify the Customer without undue delay after becoming aware of a personal data breach affecting its data;
• Assist the Customer, where reasonable, in responding to data-subject requests (access, correction, deletion, export);
• Delete or return personal data at the end of the engagement, at the Customer's choice, unless retention is required by law.

4. Sub-processors

We use established cloud infrastructure providers for hosting, database and background-processing services. A current list of sub-processors is available on request from info@matosense.com. We remain responsible for our sub-processors' performance and will inform organizational customers of material changes.

5. International transfers

We serve customers worldwide, and hosting infrastructure may be located outside the Customer's country. Where data is transferred internationally, we use providers with recognized security certifications and contractual data protection commitments.

6. Audits and information

On reasonable written request, we will provide organizational customers with information demonstrating compliance with this DPA — including summaries of our security measures — and will cooperate with audits conducted in a manner that does not endanger the security or confidentiality of other customers' data.

7. Nature of sensor data

Soil readings processed under this DPA are indicative, in-field approximations generated by the sensor's measurement techniques — not certified laboratory values. Customers using platform data for regulatory or research purposes should pair it with certified laboratory testing, as described in our Terms and Conditions.

8. Contact and execution

Organizations that require a countersigned copy of this DPA, or specific terms for procurement (including government procurement requirements), can contact info@matosense.com · +977 1 5921426 · +977 9715800900 (phone & WhatsApp).