AYWA is provided and billed by RTLS TechLab, Société par Actions Simplifiée (SAS), registered in FR under number 942468596, FR39942468596. Registered office: 166-168 Avenue Georges Clemenceau, 92000 Nanterre, FR. Legal contact: team@aywa.ai.
1. Allocation of roles
AYWA acts as controller for accounts, billing, support and service security. For contacts, campaigns, calls and documents processed on behalf of a customer, the customer determines the purposes and AYWA generally acts as processor under the applicable agreement.
2. Processing principles
- Defined purpose, documented legal basis and information of individuals by the customer.
- Data minimisation and access limited to authorised people, roles and tools.
- Retention periods appropriate to the need, agreement and legal duties.
- Accuracy, security, traceability and regular review of access and configurations.
3. Instructions and subprocessors
AYWA processes customer data according to documented instructions, service settings and the agreement. Providers needed for hosting, the voice runtime, AI, telephony, payments, email or monitoring may act as subprocessors. Their involvement depends on the options and keys selected by the customer.
4. Calls and campaigns
The customer is responsible for the lawfulness of lists, scenarios and schedules, notices about AI and recording, consent where required and handling individual rights. AYWA provides configuration controls but does not replace legal analysis specific to the customer, country and sector.
5. Individual rights
AYWA assists the customer, to the extent provided by the agreement, with access, correction, deletion, restriction, portability and objection requests. A request relating to a customer call or prospect is forwarded to that customer. Requests about an AYWA account may be sent to team@aywa.ai.
6. Location and transfers
The control plane uses, in particular, a European region. The voice runtime may be deployed in the environment selected for the service. AI, telephony, email, payment or monitoring providers may process some data in other countries. Transfers outside the EEA must rely on an appropriate legal mechanism.
7. Security and incidents
AYWA applies measures proportionate to risk and informs the customer of a personal-data breach affecting it under the conditions and time frames set by the agreement and applicable law. The customer remains responsible for its users, keys, integrations and infrastructure.
8. Documentation and contact
Detailed commitments on processing, assistance, deletion and audits are set out in the applicable agreement or data processing addendum. For a data-protection question: team@aywa.ai.