The Data processing addendum will form part of the Terms of service for customers who need it. Here is what it will cover.
Roles
That, for files and information your clients upload, your business decides what is collected and why, and Collevo processes it on your behalf.
What we process and why
The kinds of personal data involved (such as client contact details, uploaded files and answers, and the activity log for each request) and the only purposes we may use them for.
How we protect it
Our security measures, including encryption in transit and at rest, and the fact that uploads are processed temporarily for checking, then removed once accepted files reach your Google Drive or Dropbox.
Sub-processors
The providers that help us run the product, where they are, and how we will tell you before adding new ones.
International transfers
The safeguards that apply when personal data moves between countries.
Requests, incidents and audits
How we help you answer your clients’ requests about their data, how and when we tell you about a security incident, and what information we provide so you can check our compliance.
Deletion
What happens to the data we hold for you when you close your account. Files already in your own storage stay under your control.
Questions
If you need details for a security or privacy review before the addendum is published, email hello@collevo.io.