Data Processing Addendum
This DPA applies where I Enterprise Ltd processes personal data about your callers on your behalf. It forms part of our Terms.
1. Roles
You are the controller of caller personal data; I Enterprise Ltd is the processor. Each party will comply with applicable data protection law (UK GDPR, EU GDPR, and equivalent US state laws).
2. Scope & instructions
We process caller data only to provide the service and on your documented instructions (including via your account settings), unless required by law.
3. Security
We maintain appropriate technical and organisational measures: encryption in transit, hashed credentials, access controls, and logging.
4. Sub-processors
You authorise the sub-processors listed in our Privacy Policy. We will give notice of changes and remain responsible for their performance.
5. Data subject requests
We will assist you in responding to caller requests (access, deletion, etc.) taking into account the nature of processing.
6. Personal data breach
We will notify you without undue delay after becoming aware of a personal data breach affecting your caller data, with information reasonably available to us.
7. Return & deletion
On termination, we will delete or return caller personal data within a reasonable period, save where retention is required by law.
Annex — details of processing
- Subject matter: AI answering of your inbound calls.
- Duration: the term of your subscription.
- Nature & purpose: answering, message-taking, transfers, logging.
- Data types: caller phone number, voice/audio, transcripts, message content, metadata.
- Data subjects: your callers (customers, prospects, suppliers).