Data processing agreement

This agreement is part of our Terms of service. It applies when Hushdesk processes personal data on your behalf, such as your customers’ messages, contact details and orders.

1. Roles

You are the controller of the personal data you put into Hushdesk. Hushdesk is your processor and acts only on your documented instructions, which are these terms, your settings in the product, and your written requests.

2. What we process

• Data subjects: your customers, website visitors who chat with you, and your team.
• Data: names, email addresses, phone numbers, postal addresses, order details, message content and attachments, and technical data such as browser type.
• Purpose: to provide the Hushdesk service.
• Duration: for as long as you use Hushdesk, plus 30 days to let you export.

3. Our commitments

• Process the data only to provide the service and as you instruct.
• Make sure everyone with access is bound by confidentiality.
• Apply the security measures described on our Security page.
• Use sub-processors only as listed on our Sub-processors page, with contracts that give at least the same protection, and give you 30 days’ notice of new ones so you can object.
• Help you answer requests from data subjects, mostly through the product’s own export and delete tools.
• Tell you without undue delay, and within 48 hours, after we become aware of a personal data breach affecting your data.
• Delete or return your data when the service ends, unless the law requires us to keep it.
• Make available the information needed to show we comply, and allow reasonable audits.

4. International transfers

Where personal data leaves the European Economic Area, we use the European Commission’s standard contractual clauses or another lawful transfer mechanism.

5. Liability

The liability terms of the Terms of service apply to this agreement.

To request a signed copy, email legal@hushdesk.tech.