This Data Processing Addendum (“DPA”) describes how qwalify.in (“Processor,” “we”) handles personal data on behalf of a business (“Client,” “Controller”) that engages us to call, qualify, and book Client’s own leads using our AI voice agents. It supplements — and doesn’t replace — the service agreement between qwalify.in and Client. For how we handle data collected directly through this website, see our Privacy Policy.
Roles
Client is the Data Controller for personal data belonging to its own leads and customers. qwalify.in acts as a Data Processor, handling that data solely to deliver the calling service, and only on Client’s documented instructions (including the configuration Client sets up with us).
What we process, and why
On Client’s behalf, we process lead contact details (name, phone number, email, address), the details of Client’s inquiry (service requested, notes), and the resulting call data (recording, transcript, AI-generated summary, sentiment, and outcome) and any appointment booked. This is processed solely to place the call, qualify the lead, book meetings, and report results back to Client.
Sub-processors
We use the following sub-processors to deliver the service. Client authorizes their use, and we’ll give reasonable notice before adding or replacing one where it materially changes how data is handled:
- Retell AI — AI voice agent platform that places and analyzes calls
- Telephony carriers — connect outbound calls to leads’ phone numbers
- Airtable — stores lead records and call outcomes for Client
- Google Calendar — checks availability and books appointments
- Vercel — hosts the web infrastructure that captures lead submissions
Security measures
We restrict access to lead and call data to what’s needed to operate the service, use encrypted connections (HTTPS/TLS) for data in transit, and review our sub-processors’ security practices before relying on them. We’ll notify Client without undue delay if we become aware of a personal data breach affecting Client’s data.
Data subject requests
If someone contacts us directly about their data being processed as part of Client’s campaign, we’ll forward the request to Client and reasonably assist Client in responding to it, since Client — not us — controls that relationship.
Retention and deletion
We retain data processed on Client’s behalf for as long as the underlying service agreement is active, plus any period required to meet legal obligations. Upon termination, we’ll delete or return Client’s data within a reasonable period, unless applicable law requires us to retain it longer.
International transfers
Some sub-processors listed above may process data outside Client’s or its leads’ country, including in the United States. We rely on those providers’ contractual and technical safeguards when this occurs.
Audit
On reasonable request, we’ll provide Client with information reasonably necessary to demonstrate compliance with this DPA.
Term
This DPA applies for as long as we process personal data on Client’s behalf under the underlying service agreement.
Want a signed copy?
If your organization needs a countersigned version of this DPA for your own compliance records, email mustafa@qwalify.in and we’ll send one over.