Data Processing Addendum

Definitions

Data Controller: The law firm using Zyrama services. Data Processor: Zyrama LLC. Personal Data: Any information relating to an identified or identifiable natural person processed during the use of our services.

Data processed

We process the following categories of data strictly on behalf of the Data Controller: caller name, contact number, case type summary, call transcripts, call recordings, and intake notes. We do not process or store this data for our own purposes.

Security measures

We implement enterprise-grade security protocols to protect attorney-client privilege. All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. We enforce strict access logging and role-based access controls. Our internal staff cannot access individual client transcripts or audio without explicit permission from the Data Controller.

Sub-processors

Zyrama uses authorized third-party vendors to deliver our service. These include Twilio (telephony), Vapi (voice AI orchestration), OpenAI (language processing), Deepgram (transcription), ElevenLabs (speech generation), Cloudflare (hosting/CDN), and Resend (email delivery). All AI-related sub-processors are bound by zero-data-retention agreements regarding AI model training.

Data retention & deletion

To minimize liability, call recordings, transcripts, and intake data are retained on our servers for a strict default period of 30 days. After 30 days, data is automatically and permanently purged. Data will be deleted immediately upon written request from the Data Controller or upon termination of the Master Service Agreement.

Data subject rights

Because Zyrama operates strictly as a Data Processor, any consumer data subject requests (such as the right to access or erasure under state privacy laws) must be submitted directly to the law firm (the Data Controller). We will promptly comply with any deletion directives issued by the Data Controller.

Contact for data requests

For legal, privacy, or compliance inquiries related to data processing, please contact us at: legal@zyrama.com