Last updated: January 2026
This DPA applies where OxelLab processes personal data (such as your callers' data) on your behalf. Where you are the controller of that data, OxelLab acts as your processor.
OxelLab processes personal data only to provide the Service and per your instructions (including your dashboard settings).
You authorize the sub-processors listed in our Security page and Privacy Policy. We remain responsible for their performance of these obligations.
We maintain reasonable technical and organizational measures, including encryption in transit and access controls.
We will notify you without undue delay after becoming aware of a personal-data breach affecting your data.
We will assist you in responding to data-subject requests and will delete or return your data on termination, subject to legal retention.