Data Processing Addendum

What the processor terms cover for customer website data, and how to request them.

Document status: this page explains the DPA and its request process. It is not a signed Data Processing Addendum and does not provide a downloadable, approved contract.

What the DPA is for

When you install Voicedot on a website and decide why visitor feedback is collected, you normally act as the controller of that data. Voicedot processes it on your behalf to provide the service.

The DPA documents that processing relationship. It does not replace your own privacy notice, lawful basis, widget configuration or internal approval process. For Voicedot’s own account, billing, support and operating data, Good Sheet may act as controller.

What the terms cover

Subject matter and duration

Scope described on the DPA information page: The customer relationship and the applicable processing, retention and deletion periods.

Nature and purpose

Scope described on the DPA information page: Running the widget, receiving messages, transcribing voice, maintaining conversations and page context, routing or notifying where configured, securing the service and supporting account administration.

People and data

Scope described on the DPA information page: Website visitors and reviewers, account users and team members; messages, optional email, audio when used, transcripts, page and pin context, session metadata, account and billing information as applicable.

Customer responsibilities

Scope described on the DPA information page: Deciding why to collect data, providing notices and a lawful basis, limiting sensitive information, configuring the widget, controlling access and handling requests as controller.

Subprocessors

Scope described on the DPA information page: Provider authorization, changes and the current provider list.

Security measures

Scope described on the DPA information page: The documented measures concerning access, credentials, storage, authentication, minimized telemetry and administration.

Return and deletion

Scope described on the DPA information page: What happens to data after the service ends and how applicable retention and deletion rules operate.

Standard or counter-signed copies

Scope described on the DPA information page: The process for requesting the appropriate document, where available, using company and legal-contact details.

What the terms cover
Area	Scope described on the DPA information page
Subject matter and duration	The customer relationship and the applicable processing, retention and deletion periods.
Nature and purpose	Running the widget, receiving messages, transcribing voice, maintaining conversations and page context, routing or notifying where configured, securing the service and supporting account administration.
People and data	Website visitors and reviewers, account users and team members; messages, optional email, audio when used, transcripts, page and pin context, session metadata, account and billing information as applicable.
Customer responsibilities	Deciding why to collect data, providing notices and a lawful basis, limiting sensitive information, configuring the widget, controlling access and handling requests as controller.
Subprocessors	Provider authorization, changes and the current provider list.
Security measures	The documented measures concerning access, credentials, storage, authentication, minimized telemetry and administration.
Return and deletion	What happens to data after the service ends and how applicable retention and deletion rules operate.
Standard or counter-signed copies	The process for requesting the appropriate document, where available, using company and legal-contact details.

The final agreement and related policies determine the actual commitments. This summary does not create additional retention, security or certification promises.

Ask about the DPA

Email support@voicedot.ai with your company name, Voicedot account or workspace email, intended use and legal contact.

Do not include passwords, visitor messages, audio recordings or sensitive customer content. We can use those business details to identify the request and explain the current document process.