Data Processing Addendum
For organisations that need processing terms alongside a subscription. A counter-signable copy is available on request.
- Effective date:
- 18 August 2026
- Entity:
- Marketsync Global Ltd. — RJSC No. RAJC-2483/2025
Draft placeholder copy — pending legal review. This document describes our current intended practice. It has not been reviewed by counsel and is not a binding agreement until marked as reviewed.
Roles of the parties
For customer account and user data, the customer is the controller and Marketsync Global Ltd. is the processor. For our own public research records, we act as controller.
Scope of processing
Subject matter: provision of the startups.bd platform. Data subjects: customer personnel with accounts. Data categories: name, work email, role, organisation, usage logs. Duration: the term of the subscription.
Sub-processors
- Supabase — database and authentication hosting.
- Stripe — payment processing.
- Resend — email delivery.
Security measures
Encryption in transit, row-level access control on tenant data, least-privilege service credentials, and server-side enforcement of entitlements. See the security page for what is implemented today versus planned.
International transfers
Data may be processed outside Bangladesh by the sub-processors listed above. Where required, transfers rely on the standard contractual clauses published by the relevant authority.
Assistance and deletion
We assist with data-subject requests and security incident notification without undue delay, and delete or return customer personal data within 60 days of termination unless law requires retention.
Contact
Questions about this page? Write to legal@startups.bd. Postal enquiries: Marketsync Global Ltd., Kashidanga City Gate, Rajpara, Rajshahi-6201, Bangladesh.
Marketsync Global Ltd. · Reg. No RAJC-2483/2025 · TIN 317774303960 · Trade Licence 01/13-2665 · Incorporated under the Companies Act, 1994 (Act XVIII of 1994).