TempleOS Legal
Data Processing & Subprocessor Notice
Effective Date: September 18, 2026
This notice supplements the Terms and Privacy Policy for customer temples that use TempleOS to process devotee, staff, financial and operational records. A separately signed data-processing agreement or enterprise order prevails where it contains more specific terms.
1. Roles and instructions
The customer temple determines the purposes, lawful authority, access permissions and retention requirements for its operational data. CODE SPECTRUM TECHNOLOGY LLP processes that data to provide, secure, support, back up and maintain TempleOS according to the customer's documented use of the service and applicable law.
2. Confidentiality and access
Personnel and contractors receive access only where needed for their duties and are subject to confidentiality and security obligations. Administrative access is logged and restricted.
3. Security measures
Measures include encrypted transport, role-based access, tenant separation, audit logging, secure secrets handling, protected backups, monitoring, vulnerability remediation and recovery procedures appropriate to the service.
4. Assistance
TempleOS provides reasonable assistance with data-principal requests, security incidents, deletion/export requests and information needed for the customer's compliance assessment, taking account of the nature of the processing.
5. Subprocessor categories
- Microsoft Azure: cloud compute, storage, network and database infrastructure.
- Microsoft OneDrive: encrypted off-site backup storage where configured.
- PhonePe and other authorised payment providers: subscription and temple-payment processing, status and reconciliation.
- Meta/WhatsApp providers: opted-in messaging, templates, delivery and status events where enabled by the temple.
- A2 Hosting/email infrastructure: transactional email transport and mailbox services.
- Google Analytics: consent-based analytics for the public marketing website only.
Only the providers required for the customer's enabled services receive relevant data. Provider names may change as infrastructure evolves; material changes affecting customer data will be communicated where reasonably possible.
6. Return and deletion
On termination, TempleOS will provide export support during the communicated retrieval period and will delete or anonymise customer data after applicable contractual, backup and legal-retention periods expire.
7. Contact
Enterprise customers may request a signed data-processing addendum or current provider details at support@templeos.in.