Data Processing Addendum
Last updated: [effective date] · Version 1.0
This Addendum forms part of the Terms & Conditions between you ("Customer") and A Plus Solution, operator of Convo360 ("we", "us"). It applies where we process personal data on your behalf.
1. Roles
You are the data controller (or fiduciary) for the personal data you process using Convo360. We act as your data processor, processing that data only to provide the Service and on your documented instructions.
2. Bring-your-own-keys (BYOK)
AI, voice and (where applicable) telephony providers are accessed using your own API keys and accounts. You are the controller for that processing and it is governed by your agreements with those providers. We do not use your data, or your customers' data, to train any AI or machine-learning model.
3. Security
- Personal data is encrypted at rest and in transit.
- Access is restricted on a need-to-know basis.
- We will notify you of a personal-data breach affecting your data within six (6) hours of becoming aware of it.
4. Sub-processors & hosting
We use the sub-processors listed at convo360.ai/subprocessors. We may add or replace a sub-processor on at least 30 days' notice, with a right for you to object on reasonable data-protection grounds.
5. Data subject rights
We will provide reasonable assistance to help you respond to requests from data principals/subjects (access, correction, erasure, portability) to the extent the data is within the Service.
6. Data return & deletion
You can export your data at any time, self-serve, in CSV or JSON — including contact lists, message and conversation logs, opt-in/consent records, template records and chatbot flow definitions. This export remains available on and after termination, and even if the Service is suspended for non-payment (we may pause the Service, but will not withhold your data). On written request following termination we will delete your data within a reasonable period, save where retention is required by law.
7. Liability
Our liability under this Addendum is subject to the limitations and cap set out in the Terms & Conditions.