Data Processing Addendum

This addendum applies where Swifts AI processes personal data on your behalf as part of the Service, and forms part of the Terms of Service.

1. Roles and scope

You are the controller; we are the processor. We process personal data only to provide the Service and on your documented instructions, including those given through the workspace configuration and connected apps.

2. Categories of data and data subjects

Depending on how you use the Service: contact details of your customers and staff, message content, documents and files you upload, and the technical metadata needed to deliver them. Data subjects typically include your customers, employees and prospects.

3. Our obligations

• Process only on your instructions and for the purpose of the Service.
• Ensure staff who access personal data are bound by confidentiality.
• Implement appropriate technical and organisational measures, including tenant isolation, encryption of credentials at rest, access control and audit logging.
• Assist you with data-subject requests and with security, breach and impact assessments.
• Notify you without undue delay after becoming aware of a personal-data breach.

4. Sub-processors

You authorise the sub-processors used to deliver the Service. We impose equivalent data-protection terms on them, and we will inform you of intended changes so you can object.

5. International transfers

Where personal data leaves your region we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

6. Deletion and return

On termination, or on your request, we delete or return personal data and delete existing copies unless law requires us to keep it.

7. Audits

We make the information reasonably needed to demonstrate compliance available to you, and allow audits subject to confidentiality and reasonable notice. You can contact us at support@appswifts.com.

8. Liability

Liability under this addendum follows the limitations in the Terms of Service.