Data Processing Agreement (DPA)

Where a customer acts as controller of personal data processed through its Parlo chat, Parlo acts as processor only on documented instructions necessary to provide the service.

Subject matter

Hosting, transmission, storage, moderation tooling, security and backup of chat data for the duration of the service.

Data and data subjects

Chat users, moderators and administrators; usernames, messages, media, moderation records, session/security identifiers, IP addresses and other data submitted through the service.

Processor duties

Confidentiality, appropriate technical and organisational measures, reasonable assistance with data-subject rights and incidents, deletion/return at the end of processing, and information needed to demonstrate compliance.

Subprocessors

Parlo may use infrastructure, hosting, transactional email and other technical providers needed to deliver the service where they can access data processed on behalf of a customer. Stripe processes payment data as a subprocessor engaged by Parlo, which remains the seller of record. Parlo maintains the applicable subprocessor list and transfer safeguards where required.