The terms under which we process data on your behalf, summarised in readable English. Signed copies available for business customers.
For personal data inside your customer content, you are the controller and Sha Intelligence is the processor. We process that data only to provide the GEOSY service to you.
We process customer data only on your documented instructions, which are expressed through the Terms, this agreement and your use of the platform's controls. We will tell you if an instruction appears to break the law.
Everyone we authorise to handle customer data is bound by confidentiality obligations and trained accordingly.
We apply the technical and organisational measures described on our Security page, including encryption in transit and at rest, access controls and audit logging, and we keep them current.
We use a limited set of sub-processors to run the service, listed on our Sub-processors page. We remain responsible for their performance and will give notice of material changes so you can object.
Where processing crosses borders, we rely on recognised safeguards such as adequacy decisions or standard contractual clauses, and we honour regional residency commitments where agreed.
We help you respond to data subject requests and regulator enquiries that concern data we process for you, and we will notify you without undue delay if we become aware of a personal data breach affecting your data.
When the service ends, we make your content available for export for a reasonable period, then delete it from our systems, subject only to legal retention duties.
We provide information reasonably necessary to demonstrate compliance with this agreement, and we cooperate with audits as the law requires.
Business customers who need an executed DPA for their records can request one through the contact page.
We are onboarding early partners across both missions. Tell us about your team and we will be in touch.