Skip to main content
IK CLOUD SOLUTIONS

Data processing summary

A plain summary of how we handle personal information on behalf of customers of the AI Front Desk. It is not the contract.
Draft

Last updated:

1. Roles

The customer is the controller of the information about its callers and WhatsApp users. IK Cloud Solutions is the processor and acts on the customer’s documented instructions.

2. Subject matter and duration

We process information to answer calls and messages for the customer for as long as the service runs.

3. Categories of data

  • Voice recordings and transcripts.
  • Phone numbers.
  • WhatsApp messages and profile names.
  • Appointment and enquiry details.

4. Purpose limits, instructions and confidentiality

We use the information only to provide the service and for no other purpose. People who can access it are bound by confidentiality.

5. Security measures

We apply appropriate technical and organisational measures. The security page says what is true today.

6. Planned subprocessors, to be confirmed before launch

This list is a plan, not a commitment. We will tell customers before we add or replace a subprocessor.

Planned subprocessors
ProviderPurposeNote
VercelWebsite hosting
ResendTransactional email
CloudflareTurnstile spam protection
Retell (planned)Voice orchestration
Telnyx (planned)UK telephony carrier
MetaWhatsApp Business PlatformAlso acts as an independent controller for some data.
To be confirmedLarge language model providerTerms that rule out training on customer data are required.

7. Help with data-subject requests

We help the customer respond to requests to access, correct or delete personal information.

8. Deletion and return

At the end of the contract we delete or return the information. Our proposed default for call recordings is [90] days, configurable by the customer.

9. Breach notification and audit

We tell the customer without undue delay after becoming aware of a personal data breach, and we make the information needed to show compliance available on request.

10. International transfers

Where a subprocessor handles information outside the UK, a lawful transfer mechanism is used. [Solicitor to confirm].

11. The full agreement

The full data processing agreement is provided on request or at order.