Legal

Data Processing Agreement

Data Processing Agreement for personal data processed through CallEasify, consistent with our Terms of Service and Privacy Policy.

Last updated August 7, 2026.

1. Overview

This Data Processing Agreement (“DPA”) forms part of the agreement between CallEasify (“Processor”) and the customer entity using the Services (“Controller”) for processing of personal data in connection with our websites, dashboards, APIs, and AI voice calling services (the “Services”). It supplements our Terms of Service and Privacy Policy. Capitalized terms not defined here have the meaning in those documents. If you use the Services on behalf of an organization, you represent that you have authority to bind that organization (Terms of Service — Agreement to terms).

2. Roles

  • Controller — you determine the purposes and means of processing personal data in contact lists, campaigns, and call content you submit.
  • Processor — CallEasify processes that data on your documented instructions to provide the Services.
  • Each party will comply with data-protection laws applicable to its role, including the Digital Personal Data Protection Act, 2023 (DPDP Act) where it applies in India.

3. Details of processing

  • Subject matter — provision of outbound AI voice calling, campaign execution, analytics, integrations you connect, and related support.
  • Duration — for the term of your subscription and any retention period required by your workspace settings, our Privacy Policy, or law.
  • Nature and purpose — hosting, telephony, transcription, summarization, storage, transmission, and write-back to tools you connect, as needed to run the Services.
  • Types of data — as described in the Privacy Policy, including account information; contact and campaign data (phone numbers, names, and related fields); call content (audio, transcripts, summaries, outcomes, AMD results, and metadata); usage and device data; and communications with us.
  • Data subjects — your personnel, end customers or prospects you contact on outbound campaigns, and other individuals whose data you submit.

4. Processor obligations

  • Process personal data only on documented instructions from Controller, unless required by law.
  • Ensure persons authorized to process personal data are bound by confidentiality.
  • Implement appropriate technical and organizational security measures, including encryption in transit, access controls, and monitoring, as described in the Privacy Policy.
  • Engage sub-processors under written terms offering equivalent protections, and remain responsible for their performance.
  • Assist Controller with data-subject requests and assessments where reasonably required under applicable law, at Controller’s expense if the request is excessive.
  • Delete or return personal data on termination at Controller’s choice, subject to legal retention needs and the Privacy Policy.
  • Make available information reasonably necessary to demonstrate compliance and allow audits under agreed procedures.
  • Not use customer call content to train general models unless Controller explicitly opts in (Privacy Policy — How we use information).

5. Sub-processors

Controller authorizes CallEasify to use sub-processors for hosting, telephony, analytics, email, payment processing, and similar infrastructure needed to provide the Services (consistent with Privacy Policy — How we share information). A current list is available on request at hello@calleasify.com. We will provide notice of material changes to sub-processors where required by applicable law or your order form.

6. International transfers

We may process information in India and other countries where we or our providers operate (Privacy Policy — International transfers). Where personal data is transferred from the EEA, UK, or Switzerland to a country without an adequacy decision, the parties will rely on appropriate safeguards such as Standard Contractual Clauses (and UK addenda where applicable), unless another lawful transfer mechanism applies.

7. Security incidents

Processor will notify Controller without undue delay after becoming aware of a personal-data breach affecting Controller’s data, and will provide information reasonably available to help Controller meet its notification obligations under applicable law (including the DPDP Act where it applies).

8. Controller obligations

  • Controller warrants it has a lawful basis to submit personal data to the Services and to instruct Processor to place outbound calls involving that data.
  • Controller is responsible for notices and consents owed to data subjects, and for the legality of campaigns, scripts, and lists, as set out in the Terms of Service (Your responsibilities) and summarized in our Calling compliance overview.
  • Controller will not instruct Processor to process personal data in violation of applicable law.

9. Liability and order of precedence

Liability under this DPA is subject to the limitations in the Terms of Service (including Limitation of liability), except where prohibited by law. Fees, cancellations, and refunds are governed by the Terms of Service and Refund Policy. If there is a conflict between this DPA and the Terms regarding data protection, this DPA controls for that subject. If there is a conflict between this DPA and the Privacy Policy on the same data-protection topic, this DPA controls for Controller–Processor processing under the Services; the Privacy Policy otherwise describes our public privacy practices.

10. Governing law

This DPA is governed by the laws of India, without regard to conflict-of-law rules, unless a written order form specifies otherwise. Courts in Jaipur shall have exclusive jurisdiction, subject to mandatory local consumer protections where they apply (Terms of Service — Governing law).

11. Related documents

  • Terms of Service — contract for use of the Services.
  • Privacy Policy — collection, use, retention, security, and rights.
  • Calling compliance — outbound calling controls and shared responsibility in India.
  • Refund Policy — trial, cancellation, and refunds for paid plans.

12. Contact

For DPA requests or to execute a signed copy: hello@calleasify.com.

Questions? hello@calleasify.com · Contact us