• Legal •
Data processing agreement
How Callwise processes your callers' personal data for you, under the Nigeria Data Protection Act 2023.
Roles
The business is the data controller. Callwise is the data processor and acts only on the business's documented instructions: answering calls, booking, taking messages and sending summaries and confirmations.
Confidentiality and security
People with access to call data are bound by confidentiality. Data is encrypted in transit and at rest, access is limited to those who need it, and secrets are held in a key vault.
Sub-processors
Microsoft Azure (hosting, speech and language models), telephony carriers that connect calls, and Meta (WhatsApp messages). We will tell you before adding a new sub-processor.
Breaches
We notify the business without undue delay and within 72 hours of becoming aware of a personal data breach affecting its callers.
Retention and deletion
Recordings are off by default; when on, they are kept 30 days unless the business sets otherwise. When the business leaves, its call data is deleted unless the law requires us to keep it.
Data subject requests
We help the business respond to callers who ask to see, correct or delete their data.