For customers subject to GDPR and similar laws — how we process personal data on your behalf, as your processor.
For personal data you bring into GenieCentral (such as your customers' contact details), you are the data controller and GenieCentral — operated by AIVIGIL MSP (trading as Genie Central), 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA — is the data processor. We process that data only to provide the service and on your documented instructions.
Subject matter: providing GenieCentral, an AI employee and CRM that answers calls and texts, books jobs, and keeps your customer operations in one place.
Duration: for the term of your subscription plus any limited retention period.
Data subjects: your customers, leads, and contacts. Data types: identifiers, contact details, call and text records, and the content you choose to store.
Process personal data only on your instructions and for the agreed purposes.
Ensure people who process the data are bound by confidentiality.
Apply appropriate technical and organizational security measures (encryption in transit and at rest, access controls, monitoring).
Assist you with data-subject requests, breach notifications, and impact assessments.
We use vetted sub-processors (for hosting, payments, email delivery, and AI model providers) under written terms that require equivalent protection. We'll maintain a current list and give you notice of changes so you can object.
Where personal data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
Prompts and content processed by third-party AI providers are handled under business/enterprise terms that prohibit using your data to train their models. Outward-facing actions require your approval.
If we become aware of a personal-data breach affecting your data, we'll notify you without undue delay and share the information you need to meet your own obligations.
On termination, we'll delete or return your personal data at your choice, except where retention is required by law.
We'll make available the information needed to demonstrate compliance and, on reasonable request and notice, support audits consistent with protecting other customers' confidentiality.
This agreement is governed by the laws of the State of Wyoming, USA. For DPA requests, email [email protected].