Legal

Data Processing Agreement

Last updated: August 7, 2026

Scope & Definitions

This Addendum applies where CallRolin processes personal data on behalf of a customer ("Controller") in the course of providing the Service. "Personal data," "processing," "controller," and "processor" have the meanings given under applicable data protection law.

Processing of Personal Data

CallRolin processes customer audio, text, and account data solely to provide the Service, to meter and bill usage, and — as disclosed in our Privacy Policy — to improve and train our voice models. Standard processing takes place on CallRolin's cloud infrastructure (Google Cloud); Enterprise customers may use on-premise deployment for in-country or in-environment data residency.

Subprocessors

CallRolin engages the subprocessors listed on our Subprocessors page. We remain responsible for their compliance with this Addendum.

Security Measures

CallRolin applies technical and organizational measures including encryption in transit (TLS), access controls, and audit logging to protect personal data.

International Transfers

On standard plans, customer data is processed on Google Cloud infrastructure and may be stored outside Pakistan. Enterprise customers who require data to remain within Pakistan or their own environment can use our on-premise deployment. Any international transfers are handled in accordance with applicable law.