LEGAL

Data Processing Agreement

This DPA applies between ONXYN Studio Ltd (Processor) and the Customer (Controller) and forms part of the AfterCaller service agreement.

1. Definitions

“Personal Data” means caller audio, transcripts, names, phone numbers, and any other personally identifiable information processed via the AfterCaller service.

2. Processing scope

Processor processes Personal Data solely to deliver the AI receptionist service and only on documented Customer instructions.

3. Subprocessors

Listed in the Privacy Policy. Customer is deemed to have consented to current subprocessors. New subprocessors notified 30 days in advance.

4. Security

Encryption in transit (TLS 1.3) and at rest (AES-256). Access controlled via least-privilege RBAC. Audit logs retained 12 months.

5. Sub-processor list & DPAs

A signed PDF copy is available on request to [email protected].