Data processing agreement
Important: This is an outline for the private preview. It must be drafted in full and reviewed by a qualified lawyer before it's offered to customers.
Scope
Relay runs on the customer's own PC and keeps email content, files and cases there. We do not receive or host that content, so for the Relay software we are not a processor of it.
We act as a processor only for limited data in our licence service: the licensee's name and email, licence details and the anonymous PC IDs sent by the licence check. For Implementation customers, we may also process customer data while setting Relay up, under the customer's instructions.
What the full agreement will cover
- The subject matter, duration, nature and purpose of the processing, and the types of data and data subjects.
- Processing only on documented instructions.
- Confidentiality of people authorised to process the data.
- Security measures (encryption in transit, access control, password hashing, logging).
- Sub-processors: Hostinger International Ltd. (hosting), [email provider], [payment provider]; with notice of changes.
- Help with data subject requests, breaches and impact assessments.
- Deletion or return of data at the end of the service.
- Audits and information to show compliance.
- International transfers and the safeguards used.
AI providers
The AI provider the customer chooses processes masked task text under the customer's own agreement with that provider. The customer should put a data processing agreement in place with them.
To request a signed agreement, contact us.