Data Processing Addendum

1. Subject matter and duration

We process personal data as needed to provide calling, messaging, numbers, account administration, billing support, and related features for the term of your subscription and any post-termination retention described in the Privacy Policy.

2. Nature and purpose of processing

Processing includes collection, storage, transmission, analysis for delivery and abuse prevention, and deletion of communications metadata and content you submit through the Service, as well as end-user contact details you place in the Service.

3. Types of personal data and data subjects

• Your users: names, emails, phone numbers, authentication identifiers
• Your contacts and called/messaged parties: phone numbers and message/call content you initiate
• Technical logs associated with those communications

4. Processor obligations

• Process personal data only on documented instructions from you (including the Terms and product configuration), unless required by law
• Ensure persons authorized to process data are bound by confidentiality
• Implement appropriate technical and organizational security measures
• Assist with data-subject requests, breach notification, and DPIAs where reasonably required and legally applicable
• Delete or return personal data after the Service ends, subject to legal retention needs

5. Subprocessors

You authorize us to engage subprocessors in the following categories. We remain responsible for their performance as required by applicable law:

• Cloud hosting and infrastructure providers
• Voice and SMS communications / carrier platform providers
• Payment and billing processors
• Email and transactional notification providers
• Security, monitoring, and analytics providers used to operate the Service

6. International transfers

Where personal data is transferred internationally, we use appropriate safeguards such as Standard Contractual Clauses where required, as described in the Privacy Policy.

7. Breach notification

We will notify you without undue delay after becoming aware of a personal-data breach affecting data we process on your behalf, and will provide information reasonably available to help you meet your own notification duties.

8. Contact

DPA and subprocessor inquiries: info@cloudlinksolutions.com or Contact → Privacy request.