Data Processing Agreement (DPA)

This Data Processing Agreement (“DPA”) forms part of the agreement between the Customer and iPaymnt Tech (“Wiretalk”, “Processor”, “we”, “us”) for use of the Wiretalk platform at wiretalk.tech.

When a Customer uses Wiretalk to process personal data relating to its website visitors, messaging contacts, or support users, Wiretalk acts as a data processor and the Customer acts as the data controller.

1. Subject matter & duration

Wiretalk processes personal data on behalf of the Customer to provide live chat, ticketing, knowledge base, omnichannel messaging, analytics, AI-assisted replies, and related support services for the duration of the Customer’s subscription.

2. Nature & purpose of processing

• Hosting and delivering chat, ticket, and messaging workflows configured by the Customer
• Storing conversation history, attachments, visitor metadata, and agent actions as directed by the Customer
• Providing optional AI features using Customer-provided API keys or configured knowledge-base content
• Delivering notifications, webhooks, exports, and account administration requested by authorized users

3. Categories of data subjects & personal data

Depending on Customer configuration, this may include End Users/visitors, Customer employees/agents, and messaging contacts. Data may include names, email addresses, phone numbers, chat content, device/browser data, IP addresses, and custom fields submitted through forms or channels.

4. Customer obligations

• Provide a lawful basis and any required notices/consents to End Users
• Configure retention, access controls, and integrations responsibly
• Issue documented instructions that comply with applicable data protection law
• Not submit special category data unless explicitly agreed in writing

5. Processor obligations

• Process personal data only on documented Customer instructions, unless required by law
• Ensure personnel authorized to process personal data are bound by confidentiality
• Implement appropriate technical and organizational security measures
• Assist the Customer with data subject requests where feasible
• Notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer data

6. Subprocessors

The Customer authorizes Wiretalk to engage subprocessors listed on our Subprocessors page. Wiretalk will remain responsible for subprocessors and will provide reasonable notice of material changes.

7. International transfers

Where personal data is transferred outside the Customer’s jurisdiction, Wiretalk will implement appropriate safeguards required by applicable law, such as standard contractual clauses or equivalent mechanisms where available.

8. Deletion & return of data

Upon termination of the Service, Wiretalk will delete or return Customer personal data within a reasonable period, subject to legal retention requirements and backup cycles.

9. Audits

Wiretalk will make available reasonable information necessary to demonstrate compliance with this DPA. Formal audits may be conducted no more than once per year on reasonable notice, subject to confidentiality and security constraints.

10. How to execute this DPA

For most Customers, acceptance of Wiretalk’s Terms of Service and continued use of the Service constitutes acceptance of this DPA. Enterprise Customers requiring a countersigned copy may email admin@wiretalk.tech with their company legal name, billing contact, and data protection contact.