OverviewData Processing Agreement

Data Processing Agreement

Our comprehensive DPA governs how FlexiFunnels processes personal data on behalf of its customers, covering GDPR and DPDPA — the two regulations FlexiFunnels is officially certified for.

Data Controller
Misfits Change Makers Private Limited (FlexiFunnels)
Governing Law
GDPR, DPDPA
EU Representative
Rickert Rechtsanwaltsgesellschaft mbH, Bonn, Germany
Data Security
Encryption at rest and in transit, access controls

About Our DPA

FlexiFunnels' Data Processing Agreement (DPA) is a legally binding contract between Misfits Change Makers Private Limited and its customers, establishing the terms under which personal data is processed on their behalf.

The DPA is designed to comply with Article 28 of the GDPR, which requires a written contract between data controllers and data processors. It covers all processing activities performed by FlexiFunnels as a data processor on behalf of its customers.

Our DPA is automatically incorporated into the FlexiFunnels Terms of Service and applies to all customers who use our platform to process personal data of EU/EEA or Indian residents.

View Full DPA

Processing Purposes & Legal Basis

CategoryPurposeLegal Basis
Account ManagementCreating and managing user accounts, authentication, and access controlContract
Service DeliveryProviding funnel building, hosting, and course delivery servicesContract
Payment ProcessingProcessing transactions and managing billing informationContract
Customer SupportResponding to inquiries and resolving technical issuesLegitimate Interest
Analytics & ImprovementAnalyzing platform usage to improve features and performanceLegitimate Interest
Marketing CommunicationsSending product updates, newsletters, and promotional contentConsent
Legal ComplianceFulfilling legal obligations and responding to regulatory requestsLegal Obligation
Fraud PreventionDetecting and preventing fraudulent activities and security threatsLegitimate Interest

International Data Transfers

FlexiFunnels is headquartered in India and may transfer personal data internationally. All international transfers are conducted with appropriate safeguards:

Standard Contractual Clauses (SCCs) — EU/EEA to third countries
Adequacy Decisions — Where applicable
Binding Corporate Rules — Intra-group transfers

Download Documents

FlexiFunnels Data Processing Agreement
Web Page
GDPRDPDPA

Need a Custom DPA?

Enterprise customers may request a custom DPA tailored to their specific requirements.

Contact Privacy Team