Data Processing Addendum.

When you use FunnelConvo to deploy chatbots on your sites, you are the data controller for the personal data of your visitors. Digismart Mega Ltd, trading as FunnelConvo (registered in England & Wales, Company No. 16925464), acts as your data processor.

The subject matter is the processing of visitor personal data through FunnelConvo's chatbot platform. The duration is the term of your subscription, plus any retention period required to support deletion or data return.

FunnelConvo processes contact details (name, email, phone), conversation transcripts, technical identifiers (IP, device, browser), and any custom fields you collect through your chatbots.

We engage a limited set of sub-processors, including AWS, Stripe, and OpenAI. A current list is maintained at funnelconvo.com/subprocessors. We notify you of changes at least 30 days in advance.

We maintain technical and organizational measures appropriate to the risks, including encryption in transit and at rest, access controls, audit logging, and SOC 2 Type II certification.

Where personal data is transferred outside the EEA or UK, we rely on the Standard Contractual Clauses (SCCs) and the UK IDTA, with supplementary measures as needed.

You may audit our compliance with this DPA once per year, with reasonable notice. We will provide third-party audit reports (such as SOC 2) on request to satisfy most audit requirements.

Upon termination, FunnelConvo will delete or return all personal data processed on your behalf within 30 days, unless retention is required by law.