Legal

Data Processing Addendum

Last updated: June 5, 2026

This Data Processing Addendum overview describes the data processing commitments Elixor, Inc. expects to include in customer agreements when Elixor processes personal data on behalf of a customer. A signed order form or negotiated DPA may contain additional or different terms.

1. Roles

For customer data submitted to the Elixor services, the customer typically acts as controller or business and Elixor acts as processor or service provider, as those terms are defined under applicable privacy laws.

2. Processing instructions

Elixor processes customer data to provide, secure, support, and improve the contracted services, and according to the customer's documented instructions, applicable agreement, and applicable law.

3. Categories of data

Data may include contact information, call audio, transcripts, extracted fields, CRM records, account metadata, support communications, knowledge base content, and operational logs.

4. Security measures

Elixor uses reasonable technical and organizational measures designed to protect customer data, including encryption, access controls, logging, least-privilege permissions, and vendor review.

5. Subprocessors

Elixor may use subprocessors to provide infrastructure, communications, analytics, support, security, and related services. Customers may request current subprocessor information by contacting [email protected].

6. Deletion and return

Upon termination or verified request, Elixor will delete or return customer data according to the agreement, except where retention is required for legal, security, billing, backup, or compliance reasons.

7. Assistance

Elixor will provide reasonable assistance for data subject requests, security reviews, and incident response where required by applicable law and customer agreement.

8. Contact

For a signed DPA or data processing questions, contact [email protected].