Loading…
Loading…
This Data Processing Agreement ("DPA") forms part of the agreement between Task Vocal Pvt Ltd ("Processor," "TaskVocal," "we") and the customer entering into TaskVocal's Terms of Service ("Controller," "Customer," "you"), and governs TaskVocal's processing of personal data on Customer's behalf in connection with the Service, regardless of the Customer's or data subjects' location.
"Personal Data" means any information relating to an identified or identifiable natural person, processed by TaskVocal on behalf of the Customer through the Service.
"Processing" has the meaning given under applicable data protection law, including India's DPDP Act, 2023, the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable regional data protection laws, as relevant to the Customer's use of the Service.
"Sub-processor" means any third party engaged by TaskVocal to process Personal Data on behalf of the Customer.
For Personal Data processed through Customer's use of the Service (including call recordings, transcripts, WhatsApp messages, chat conversations, and contact/campaign data), the Customer acts as the Data Controller/Data Fiduciary, and TaskVocal acts as the Data Processor, under applicable data protection law in the Customer's operating jurisdiction(s).
TaskVocal will process Personal Data solely for the purpose of providing the Service in accordance with the Customer's instructions, these Terms, and this DPA, including:
TaskVocal will process Personal Data only in accordance with the Customer's documented instructions, unless required to do otherwise by applicable law. TaskVocal will promptly notify the Customer if it believes an instruction violates applicable data protection law.
The Customer provides general authorization for TaskVocal to engage the Sub-processors listed in TaskVocal's Privacy Policy and Subprocessor List (including but not limited to OpenAI, DeepSeek, Sarvam AI, Deepgram, Cartesia, Twilio, Meta, AWS, Milvus, Redis, Stripe, Razorpay, and Clerk), as may be updated from time to time. TaskVocal will impose data protection obligations on Sub-processors that are substantially similar to those in this DPA and will remain responsible for Sub-processor compliance.
TaskVocal will notify Customers of material changes to the Sub-processor list via the Subprocessor List page and/or email notification. Customers may object to a new Sub-processor on reasonable data protection grounds within 14 days of notice. If the parties cannot resolve the objection, the Customer may terminate the affected portion of the Service without penalty.
TaskVocal will implement appropriate technical and organizational measures to protect Personal Data, including:
TaskVocal will ensure that personnel authorized to process Personal Data are bound by confidentiality obligations.
TaskVocal will provide reasonable assistance to the Customer in responding to requests from individuals exercising their rights under applicable data protection law — including rights of access, correction, erasure, restriction, portability, and objection under the GDPR/CCPA where applicable, and access, correction, erasure, and grievance redressal rights under the DPDP Act — taking into account the nature of the processing and the jurisdiction of the data subject.
Personal Data will be retained in accordance with the Customer's configuration on the platform and TaskVocal's Privacy Policy. Upon termination of the Service or upon Customer's request, TaskVocal will delete or return Personal Data, subject to any legal retention obligations, within 30 days of the request.
TaskVocal will notify the Customer without undue delay, and in any event within 72 hours of becoming aware, of any Personal Data breach affecting the Customer's data, and will provide reasonably available information to assist the Customer in meeting its own regulatory notification obligations in its jurisdiction.
TaskVocal is based in India and primarily processes Personal Data using infrastructure and Sub-processors that may be located in India, the United States, and other countries, as disclosed in TaskVocal's Subprocessor List. Where Personal Data originating from the EU/EEA, UK, or other jurisdictions with cross-border transfer restrictions is transferred to India or other countries, TaskVocal will implement appropriate safeguards as required by applicable law, which may include Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or other approved transfer mechanisms, upon request.
Upon reasonable written request, and subject to confidentiality obligations, TaskVocal will make available information reasonably necessary to demonstrate compliance with this DPA, which may include responding to security questionnaires or providing summary audit reports, rather than on-site audits, unless otherwise required by law.
Liability under this DPA is subject to the limitations of liability set out in the Terms of Service.
This DPA remains in effect for as long as TaskVocal processes Personal Data on behalf of the Customer under the Terms of Service.
Contact for DPA matters: [email protected]