Data processing agreement
When a business uses SayCandid, it decides why and how its customers’ videos and details are used (the “controller” under the GDPR), and we process them for it (the “processor”). Our data processing agreement is part of our Terms of service, in the section “How we handle your customers’ data”. It applies automatically to every business account; there’s nothing to sign.
In short
- We use the data only to run SayCandid as the business set it up, never for our own purposes.
- Everyone who can access it is bound to keep it confidential.
- Encryption in transit and at rest, strict access controls and regular backups.
- We help the business answer its customers’ requests to see, correct or delete their data.
- We report a personal data breach that affects the business’s data without undue delay.
- When videos or an account are deleted, the data goes too, after a short time in backups.
- Data only leaves the EU with the safeguards the law requires, such as the EU’s standard contractual clauses.
Sub-processors
We use a small number of carefully chosen service providers, each under a contract with the same protections as our terms. These are the kinds of providers we use:
| Category | What it does |
|---|---|
| EU cloud hosting and database | Runs SayCandid and stores accounts, videos and what customers type. |
| Content delivery | Delivers videos and pages quickly to the websites that show them, and keeps backups. |
| Email delivery | Sends account emails, new-video emails and the review invites a business asks us to send. |
| Speech-to-text | Turns what people say in a video into captions and a transcript. |
| AI text | Writes the short summary and quote suggestions from a transcript. |
| Payments | Takes payments for Pro, charges tax and issues invoices, as the merchant of record. |
The named list is available to customers on request. Write to us through our contact page from your account email and we’ll send it. We’ll tell account holders before we add a new sub-processor, so a business can object.
Questions
For anything about how we protect your data, or to ask for a signed copy for your records, contact us.