Data processing addendum

1. Roles

You are the controller of the personal data your customers send to your agents. We process it as your processor, only to provide the service and on your instructions, including the settings you choose in the dashboard.

2. What we process

• Messages, voice notes and images your customers send on connected channels.
• Contact details the channel provides or the customer shares, such as name, phone number, email or platform user ID.
• Leads and form answers collected by your agents.

3. Our commitments

• We process the data only to run the service for you and never sell it.
• We don't use your customers' data to train AI models.
• People with access to production data are bound by confidentiality.
• We tell you without undue delay if we become aware of a breach affecting your data.
• We help you answer requests from your customers to access or delete their data.
• When you delete data or close your account, we delete it from the live service, and from backups as they expire.

4. Subprocessors

We use these kinds of providers to run the service:

• AI model providers (such as OpenAI and providers reached through OpenRouter) to generate replies, transcribe voice notes and read images.
• Messaging platforms you connect, such as Meta (Messenger, Instagram) and Telegram, to send and receive messages.
• Hosting and email providers to run our servers and send notifications.

Ask us at our contact page for the current list of named subprocessors.

5. Signed copy

If your organisation needs a signed DPA, email our contact page with your company name and we'll send one.