Data processing agreement

Roles

Your business is the controller of the personal details in your account. KWIK L Inc is your processor. This agreement meets the processor terms of the UAE data protection law (Federal Decree-Law 45 of 2021), the UK GDPR and the GDPR, and the other laws listed on the Trust Center.

What we process

• Purpose: answering, routing and recording your inquiries, making bookings and appointments, and reporting results.
• People: the people who contact your business (customers, people asking about your services, and others), and your own team.
• Details: names, phone numbers, emails, languages, messages and the text of voice notes and calls, what they asked for, bookings and sales, and opt-ins and STOP.
• How long: while your account is open, and as the privacy policy says after that.

What we do

• Process your customers' details only to provide KWIK L ONE as you set it up. Your settings and your use of the dashboard are your instructions.
• Keep them confidential. Only the KWIK L people who give support or fix faults can open your account, and they are bound to confidentiality.
• Keep them secure, with the measures below.
• Help you answer people who ask about their details: export everything at any time, and delete one person from their inquiry in one step.
• Tell you without undue delay, and within 72 hours, of a breach that affects your customers' details, with what we know and what we are doing.
• Delete them when you delete the business: from the service at once, and from our backups within 30 days.
• Give you the information you need to show this agreement is kept, and answer reasonable questions once a year.

Sub-processors

We use the companies on the sub-processors page, each under written terms that protect your customers' details at least as well as this agreement. We email account owners 30 days before adding or replacing one. If you object, you may end your account before the change, and we refund any part of a yearly plan not yet used.

Transfers

Where details leave your country, each transfer is covered by contract terms that protect them the same way, such as the standard contractual clauses, or by the country being recognised as giving adequate protection.

Security measures

• Encrypted connections for every page, message and connection to a provider.
• Tokens and passwords you connect encrypted at rest, and never returned to any screen.
• Sign-in with Google or a one-time 6-digit code sent by email; roles for owners, team members and viewers.
• Answers only from the facts you approve; money, contracts and complaints handed to your people.
• AI models used under terms that exclude training on your data; our record of each request keeps no words.
• Your customers' details are never sold, never shared beyond the sub-processors, and never used to contact them for anyone else.
• Backups every night, kept 30 days, with a full restore tested every week; errors watched, and every new release tested before it reaches you.

Contact

KWIK L Inc, Denver, Colorado 80202, United States. Email support@kwikl.com.