This addendum governs SpeedIQ's processing of personal data as your processor and supplements our Terms of Service and Privacy Policy.
Scope and roles
This Data Processing Addendum ("DPA") forms part of the agreement between you (the "Controller") and SpeedIQ Inc. (the "Processor") and applies whenever SpeedIQ processes personal data on your behalf to provide the Services.
You determine the purposes and means of processing the personal data you upload; SpeedIQ processes it only on your documented instructions.
Nature of processing
SpeedIQ processes personal data to deliver messages across WhatsApp, Email, and SMS, operate the unified inbox and automations, and provide analytics. The categories of data subjects and personal data are determined by the contacts and content you choose to upload.
Sub-processors
You authorize SpeedIQ to engage sub-processors — including channel gateways, cloud hosting, and payment providers — to support delivery of the Services. We maintain a current list of sub-processors and will give notice of changes so you can object on reasonable grounds.
Security measures
SpeedIQ implements appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, role-based access controls, audit logging, and regular security testing.
- Encryption of personal data in transit and at rest.
- Access restricted to personnel who need it to operate the Services.
- Logging and monitoring of access to production systems.
- Documented incident response and breach-notification procedures.
International transfers
Where personal data is transferred outside its country of origin, SpeedIQ relies on Standard Contractual Clauses or another lawful transfer mechanism, together with supplementary measures where required.
Data subject requests and assistance
SpeedIQ will, taking into account the nature of processing, assist you in responding to data subject requests and in meeting your obligations around security, breach notification, and data protection impact assessments.
Return and deletion
On termination of the Services, SpeedIQ will delete or return personal data processed on your behalf, except where retention is required by law. To request a copy or deletion, contact dpo@speediq.ai.