1. Roles
You (the business) are the controller / business of your callers' personal data; OverFlow is your processor / service provider and acts only on your instructions.
2. Service-provider commitments
We process the data only to provide the service, do not sell or share it, do not use it for our own purposes, and do not combine it across customers.
3. Subprocessors
We use the subprocessors listed on our subprocessor page and will give notice of changes.
4. Security, breach notice & assistance
Our security measures, breach-notification commitment, and help with data-subject requests.
5. Deletion on termination
We return or delete personal data when the agreement ends.
This is a working draft pending legal review and is not the final agreement.