Data Processing Addendum

Roles

For customer data submitted to a workspace, the customer is generally the controller or business, and we act as a processor or service provider to provide the service. For account, billing, security, and operational data, we may act as an independent controller or business.

Processing details

Subject matter: operation of the LIT/AMS platform. Duration: the term of the customer relationship and any retention period. Nature and purpose: hosting, storage, workflow automation, reporting, support, security, backups, and service improvement.

Data categories may include account data, contact data, employee data, agent licensing data, prospect and customer information, sales records, service records, statement files, commission data, HR records, attendance records, training records, notes, documents, and technical logs.

Customer instructions

We process customer data according to the customer instructions reflected in the Terms, product configuration, user actions, and applicable order forms. Customers are responsible for the lawfulness of their data and instructions.

Customer-authorized overseas access

Los clientes pueden instruirnos para que sus empleados o contratistas autorizados en el extranjero accedan a los datos del espacio mediante los permisos de cuenta. Esos usuarios actúan bajo la autoridad del cliente y no son subencargados nuestros por el solo hecho de acceder al servicio. El cliente debe evaluar y cumplir los requisitos aplicables a ese acceso; nuestros propios proveedores siguen sujetos a las disposiciones sobre subencargados.

Security and confidentiality

We will use reasonable safeguards designed to protect customer data and require personnel with access to customer data to handle it confidentially.

Subprocessors

We may use subprocessors to provide hosting, infrastructure, email, payment, support, security, analytics, and related services. The Subprocessor List identifies hosting and configured service providers and their purposes.

Deletion, return, and assistance

El cierre, la recuperación y la eliminación siguen los plazos y criterios de la Política de Privacidad vigente y la página pública de eliminación. Esos límites específicos prevalecen sobre referencias generales a necesidades comerciales legítimas en este DPA. Cerrar una cuenta individual no termina por sí solo el espacio de la agencia. Ayudamos con solicitudes verificadas, exportación o devolución cuando esté disponible y solicitudes de eliminación a proveedores cuando corresponda. Una obligación legal específica o retención legal puede retrasar solo los registros afectados; no autoriza usos ajenos ni conservar indefinidamente todos los datos.

HIPAA note

The service is not intended to create a HIPAA business associate relationship unless a separate written Business Associate Agreement is signed. Customers should not submit protected health information requiring HIPAA treatment unless an appropriate agreement is in place.