Data Processing Addendum

When your business uses Fullday, you are the controller of the personal data you put into the service (your leads, customers and their conversations), and [Company legal name] is your processor. For agencies, the agency or its client is the controller, the agency may be a processor, and we're a subprocessor. This addendum is part of the Terms of Service.

• Whose data: your leads, customers and patients, your team, and (for agencies) your clients and prospects.
• What data: names, phone numbers, emails, addresses, messages, call recordings and transcripts, appointment details and notes.
• Why: only to provide the service: answering and booking, follow-ups, ads, websites, search and support.
• How long: for as long as you use the service, then deleted within 30 days of the end, unless the law requires us to keep it.

• Process personal data only on your documented instructions, including these terms and your settings.
• Make sure everyone who handles it is bound to confidentiality.
• Keep appropriate security measures, including encryption in transit and at rest, access controls and logging.
• Use only the subprocessors listed in our Privacy policy, with contracts that protect the data at least as well. We'll give at least [30 days'] notice before adding one, and you can object.
• Help you answer requests from people exercising their rights, and with data protection assessments where needed.
• Tell you without undue delay, and within [72 hours] of confirming it, about a breach affecting your data.
• Delete or return your data when the service ends.
• Share summaries of our security practices and audits on request.
• Use safeguards like Standard Contractual Clauses for international transfers where required.

You confirm you have a lawful basis and every consent and notice needed for the personal data you put into the service, and that your instructions to us follow the law. The Terms' limits of liability apply to this addendum.

This addendum isn't a Business Associate Agreement under HIPAA. If you need one, email support@fullday.ai before you put protected health information into the service.

To get the full Data Processing Addendum to sign, email support@fullday.ai with your company's legal name and address.