Data Processing Agreement

Last updated: June 12, 2026

This Data Processing Agreement (“DPA”) forms part of the agreement between TechTrove Software Solutions LLC (“ServIQ,” “Processor”) and the business customer (“Customer,” “Controller”) that uses the ServIQ service (the “Service”). It governs ServIQ’s processing of personal information on the Customer’s behalf and supplements our Terms and Privacy Policy.

1. Roles of the parties

For personal information of the Customer’s callers and end users processed through the Service, the Customer is the controller/business and ServIQ is the processor/service provider. ServIQ processes such personal information only to provide the Service and on the Customer’s documented instructions (including as set out in the Terms, Privacy Policy, and this DPA).

2. Subject matter & details of processing

• Nature & purpose: answering calls, capturing requests/leads, transcribing and summarizing calls, booking appointments, and sending transactional notifications.
• Duration: for the term of the Customer’s subscription, subject to the retention terms below.
• Types of personal information: names, phone numbers, email addresses, the reason for a call, appointment details, and call audio/transcripts.
• Categories of data subjects: the Customer’s callers and end users, and the Customer’s authorized users.

3. ServIQ’s obligations as service provider (CCPA/state privacy laws)

ServIQ certifies that, with respect to personal information processed on the Customer’s behalf, it will:

• Process it only on the Customer’s instructions and solely to provide the Service;
• Not “sell” or “share” the personal information, and not process it for cross-context behavioral advertising;
• Not retain, use, or disclose it for any purpose other than providing the Service, or outside the direct business relationship with the Customer;
• Not combine it with personal information from other sources, except as permitted by law to provide the Service;
• Comply with applicable privacy laws and provide the same level of protection they require.

4. Confidentiality & security

ServIQ limits access to personal information to personnel who need it and are under confidentiality obligations, and maintains appropriate technical and organizational security measures — including encryption in transit, access controls, and multi-factor authentication — designed to protect personal information.

5. Subprocessors

The Customer authorizes ServIQ to engage the subprocessors listed at serviq.tektrovesolutions.com/subprocessors, each under a written contract imposing data-protection obligations no less protective than this DPA. ServIQ remains responsible for its subprocessors’ performance and will provide a mechanism to notify the Customer of changes; the Customer may object on reasonable data-protection grounds.

6. Call recording & caller consent

The Service records and transcribes calls on the Customer’s behalf, and the AI assistant discloses at the start of each call that it is an AI and that the call is recorded. The Customer is responsible for ensuring it has any consent or notice required by law (including all-party/two-party consent in certain states) for recording and transcribing its calls.

7. Data subject requests

Taking into account the nature of the processing, ServIQ will provide reasonable assistance to help the Customer respond to requests from data subjects to exercise their rights (access, deletion, correction, opt-out, etc.). If a data subject contacts ServIQ directly, ServIQ will refer them to the relevant Customer where appropriate.

8. Security-incident notification

ServIQ will notify the Customer without undue delay after becoming aware of a personal-data breach affecting the Customer’s personal information, and will provide information reasonably available to help the Customer meet its own notification obligations.

9. Audits

On reasonable written request, and subject to confidentiality, ServIQ will make available information necessary to demonstrate compliance with this DPA, and will contribute to reasonable audits conducted by the Customer or its authorized auditor.

10. Retention, return & deletion

Call recordings, transcripts, and AI summaries are automatically deleted 30 daysafter each call. On termination of the subscription, the Customer may export its data, and ServIQ will delete or de-identify the Customer’s personal information except where retention is required by law.

11. International transfers

ServIQ and its subprocessors process personal information in the United States. If personal information is transferred from a jurisdiction that requires a transfer mechanism, the parties will implement an appropriate one.

12. Liability & general

The liability provisions of the Terms apply to this DPA. If there is a conflict between this DPA and the Terms regarding the processing of personal information, this DPA controls. This DPA is governed by the laws of the State of North Carolina.

13. Contact

TechTrove Software Solutions LLC, 1914 J N Pease Pl, Suite 138, Charlotte, NC 28262 · support@serviqmail.com