Data Processing Terms

Roles and instructions

For customer-controlled employee, contact, call, recording, note, and follow-up data, the customer is the controller and METRIC VIBES PRIVATE LIMITED, operating CallTrackly, is the processor. We process that data only to provide, secure, support, and improve the contracted service, or as required by law. The customer’s configuration and documented support requests form part of its instructions.

Processor commitments

• Keep customer data confidential and restrict personnel access to a need-to-know basis.
• Maintain appropriate technical and organizational security measures proportionate to the service and data.
• Use subprocessors under written obligations that protect customer data and remain responsible for their performance.
• Assist with reasonable data-subject, security, impact-assessment, and regulator requests, taking into account the nature of processing.
• Notify the customer without undue delay after confirming a personal-data breach affecting its data.
• Delete or return customer data at the end of service, subject to lawful retention and backup cycles.

Transfers and audits

Where cross-border safeguards are required, the parties will use an applicable transfer mechanism in the order form or signed data processing addendum. We provide information reasonably needed to demonstrate compliance and may satisfy audits with current security documentation, independent reports when available, and scoped customer reviews that protect other customers and our systems.

Signed addendum

Customers that require a signed data processing addendum or region-specific terms can request one at privacy@calltrackly.com. The signed addendum and order form control if they conflict with this public summary.