Data processing agreement

Draft. This is a placeholder to be replaced by reviewed legal text before launch. It is not a binding statement.

Roles

You are the controller of your customers' data that arrives through the channels you connect; we are the processor, acting only on your instructions as set out in this agreement and the terms of service.

Subject matter and duration

Hosting your customer-support conversations, contacts and what belongs to them, for the life of your subscription and until the workspace is erased after it ends.

Data and data subjects

Your customers' names, phone numbers, email addresses, message content and attachments; and the details of your staff who use the service.

Your instructions

We process data to provide the service as described and as you configure it (for example, enabling Hadir AI). We do not train models on your customers' data and we do not sell it.

Confidentiality and security

Encryption in transit and at rest for secrets, isolation of every workspace from every other, and staff access only at your request — logged with who, when and for how long.

Sub-processors

The current list is on the sub-processors page. We give thirty days' notice before adding one, and you may object.

Breach notification

We notify you of any breach affecting your data without undue delay and within 72 hours of becoming aware of it, with what we know about its nature, effect and our response.

Data subject rights

We help you answer access, correction and deletion requests through the export and erasure tools in your dashboard, or through support.

At the end of the service

A full export is available from settings. An erasure request runs after a 14-day cooling period; invoices alone are kept for as long as tax law requires.

Where processing happens

In the region you chose when the workspace was created. See where your data lives.