Skip to content

Legal

Data Processing Agreement

Last updated 5 November 2026

Draft: the legal entity, address and governing law are still to be confirmed. This page is hidden from search engines until they are.

This Data Processing Agreement (“DPA”) forms part of the agreement between the customer (“Controller”) and [Aeflow legal entity] (“Processor”) for Peeredly. It applies when Peeredly processes personal data on the customer’s behalf.

1. Subject and duration

The Processor processes personal data to provide Peeredly (live chat, shared inbox, CRM, analytics, triggers, helpdesk, AI Assistant and co-browsing) for as long as the customer uses the service.

2. Data and data subjects

  • Data subjects: the customer’s website visitors, contacts and customers, and the customer’s teammates.
  • Categories of data: contact details, messages and attachments, identifiers and attributes the customer sends, page views, device and approximate location data.
  • The customer should not send special-category data through Peeredly unless it has a lawful basis to do so.

3. Processor obligations

  • Process personal data only on the customer’s documented instructions.
  • Ensure people with access are bound by confidentiality.
  • Apply appropriate technical and organisational security measures (see Security).
  • Help the customer respond to data subject requests, including one-click erasure in the product.
  • Notify the customer without undue delay after becoming aware of a personal data breach.
  • Delete or return personal data at the end of the service, unless the law requires keeping it.
  • Make available the information needed to demonstrate compliance.

4. Sub-processors

The customer authorises the Processor to use sub-processors for hosting, email delivery, payments and, when the AI Assistant is switched on, AI model providers. The Processor remains responsible for them, imposes equivalent data protection terms, and will give notice of new sub-processors so the customer can object.

5. International transfers

Transfers outside the customer’s jurisdiction are protected by appropriate safeguards, such as the EU Standard Contractual Clauses.

6. Governing law

This DPA follows the governing law of the main agreement: [governing law].

Enterprise customers can request a countersigned copy: privacy@peeredly.com.