Data Processing Policy

When providing our services, Iyaalu generally acts as a Data Processor, processing information on behalf of our customers to deliver the agreed services.

Our customers remain the Data Controllers, determining what information is processed and for what purpose.

Depending on the services you use, we may process:

• Customer contact information
• Business contact lists
• CRM data
• Sales and marketing information
• Email content (where authorised)
• Social media content
• Website content
• Business documents
• Workflow data
• Analytics and reporting information
• Other information necessary to deliver the agreed services

We only process information necessary to provide the requested services.

Information is processed solely to:

• Configure and operate your customised AI workforce
• Deliver AI-powered automation services
• Execute approved business workflows
• Generate reports and business insights
• Improve operational efficiency
• Provide customer support
• Maintain service security and reliability

We do not use your business information for purposes unrelated to delivering our services.

To provide AI-powered capabilities, certain information may be securely processed using trusted third-party AI service providers.

These providers process information only as necessary to deliver the requested services and are selected based on their security, reliability, and compliance standards.

We implement appropriate technical and organisational measures designed to protect the confidentiality, integrity, and availability of your information.

These measures may include:

• Secure cloud infrastructure
• Encryption where appropriate
• Access controls
• Authentication mechanisms
• Activity monitoring
• Regular security updates

Although no system can guarantee absolute security, protecting customer data remains one of our highest priorities.

All customer information is treated as confidential.

We do not disclose customer data to third parties except:

• With your authorisation;
• Where necessary to deliver the agreed services;
• To trusted service providers acting on our behalf; or
• Where required by applicable law.

Information is retained only for as long as necessary to:

• Deliver our services;
• Meet contractual obligations;
• Resolve disputes;
• Comply with legal requirements; or
• Improve service performance where appropriate.

When information is no longer required, it is securely deleted or anonymised where reasonably practicable.

Depending on the services and technology used, your information may be processed in different countries by trusted infrastructure or AI service providers.

Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place to protect your information.

Customers are responsible for ensuring they have the necessary rights, permissions, and legal basis to provide information to Iyaalu for processing.

Customers should avoid submitting information that is unnecessary for the agreed services.

Subject to applicable law, customers may request to:

• Access information processed on their behalf;
• Correct inaccurate information;
• Request deletion of information where appropriate;
• Restrict certain processing activities; or
• Request the return or export of their data where technically feasible.

We may update this Data Processing Policy from time to time to reflect changes in our services, technology, or legal obligations.

The latest version will always be available on our website.