Data Processing Addendum
The processing terms that apply when we handle personal data on your behalf. This is a starting template and must be reviewed by your legal counsel.
Roles
You are the controller of end-customer personal data in your workspace. We are the processor and act only on your documented instructions.
Subject matter and duration
Processing lasts for the term of your subscription and covers the conversation, order, payment and delivery data necessary to provide the service.
Sub-processors
We use infrastructure, messaging, payment and AI sub-processors to deliver the service. A current list is available on request, and we remain responsible for their performance.
Security measures
Encryption in transit and at rest for sensitive fields, role-based access control enforced server-side, audit logging, and tenant isolation verified on every request.
Assistance
We will assist you with data subject requests, security incident notification and data protection impact assessments to the extent reasonably required.
Deletion and return
On termination we will delete or return personal data within a defined period, except where retention is required by law.
Last updated November 2026.