Data Processing Agreement

Scope

This DPA applies to the processing of personal data that AutoConverse carries out to provide its conversational AI services to the customer. The subject matter, duration, nature, and purpose of the processing, and the type of personal data and categories of data subjects are described in the main service agreement.

Processor obligations

AutoConverse shall:

• Process personal data only on documented instructions from the Controller
• Ensure persons authorised to process data are bound by confidentiality
• Implement appropriate technical and organisational security measures
• Not engage another processor without the Controller's prior authorisation
• Assist the Controller in responding to data subject requests
• Notify the Controller without undue delay of any personal data breach

Sub-processors

AutoConverse may engage sub-processors to support the provision of services. We maintain a list of approved sub-processors and will notify the Controller of any changes, giving them the opportunity to object.

Data subject rights

AutoConverse will assist the Controller in fulfilling its obligations to respond to data subject requests, including access, rectification, erasure, and portability. We will forward any request received directly to the Controller without responding to the data subject ourselves.

Audits

The Controller may audit AutoConverse's compliance with this DPA, subject to reasonable notice and confidentiality obligations. AutoConverse will provide all necessary information and access to demonstrate compliance.

Return or deletion

Upon termination of services, AutoConverse will return or delete all personal data processed on behalf of the Controller, unless retention is required by law. Deletion will be confirmed in writing.

Contact

For questions about this DPA, contact [email protected].