# Accessibility.build - Data Processing Due-Diligence Overview

This outline supports procurement discussion. Final obligations depend on the accepted engagement, applicable law, and any signed data-processing terms.

## Business role

- Accessibility.build is operated by KHUSHWANT PARIHAR as a sole proprietorship, with registered principal place of business in Beawar, Rajasthan, India.
- GSTIN: 08FGIPP1206G1ZH (regular registration).
- The controller/processor relationship depends on the feature and engagement.
- Client instructions and permitted purposes must be documented when Accessibility.build acts as a processor.

## Data categories

- Business contact and account information
- Project communications and support records
- URLs, code, designs, documents, images, and issue evidence supplied for the service
- Billing, invoice, transaction, and tax records
- Security and access logs

## Data minimization

- Use test accounts and synthetic data where practical.
- Do not provide passwords, production credentials, payment-card data, health records, or unrelated personal data.
- Redact customer and employee information from screenshots and reports where it is not needed.

## Providers

Review the current register at https://accessibility.build/subprocessors.

## International processing

Providers may process information in India, the United States, the European Economic Area, and other provider-controlled locations. Applicable transfer requirements are reviewed during contracting.

## Security

- Encrypted network transport
- Managed authentication and hosted payment collection
- Restricted administrative access
- Dependency and platform updates
- Responsible security-reporting route

No internet service can promise absolute security.

## Retention and deletion

- Active project information is retained for delivery and support.
- Billing and tax records are retained as legally required.
- Deletion and return requirements should identify active systems, backups, legal holds, and required business records.

## Incidents and rights requests

- Security reports: contact@accessibility.build with subject "Security report"
- Privacy requests: contact@accessibility.build
- Contract-specific notification timing is documented in the accepted terms.