- 1.1
This agreement is part of the Terms of service. It applies when your recordings, texts or other material contain personal data about other people, such as clients, and the GDPR or UK GDPR applies to that data.
- 1.2
For that data you are the controller and the operator of Frazo is your processor. For your own account data the operator is the controller, as described in the Privacy policy.
- 1.3
Subject matter: providing the Frazo service. Duration: until your account is deleted. Nature and purpose: storing, transcribing, generating drafts from and showing back your material. Data subjects: people you mention in your material. Data categories: whatever you put into recordings and texts; under the Client privacy rules this should not include anything that identifies them.
- 2.1
The operator processes the data only on your documented instructions, which are the Terms of service and your use of the service, unless the law requires otherwise; in that case the operator tells you first unless the law forbids it.
- 2.2
Only the operator has access to the data and is bound by confidentiality.
- 2.3
The operator applies the security measures described in the Privacy policy: HTTPS only, sign-in without passwords, codes stored as fingerprints, short-lived links to recordings, logs without content, and access to the server limited to the operator.
- 2.4
The operator helps you answer requests from data subjects, mainly through the tools in the dashboard: deleting recordings, editing texts, exporting and deleting data.
- 2.5
The operator notifies you without undue delay, and where possible within 48 hours, after becoming aware of a personal data breach affecting your data, and gives you the information you need to meet your own obligations.
- 2.6
On request, the operator gives you the information needed to show compliance with this agreement.
- 3.1
You authorise the operator to use the subprocessors listed in Subprocessors and data locations (frazo.app/en/docs/subprocessors). The operator binds them to data protection obligations that are no less protective in substance than this agreement, as far as their terms allow.
- 3.2
The operator updates the list before a new subprocessor starts receiving data. You may object within 14 days by writing to hello@frazo.app; if we cannot address the objection, you may end the agreement by deleting your account.
- 4.1
The data is stored in the Netherlands. Speech recognition, language model and email providers are in the USA. Where the data leaves the European Economic Area or the UK for a country without an adequacy decision, the transfer relies on the safeguards offered by the recipient, such as the Standard Contractual Clauses or a certification under the EU-U.S. Data Privacy Framework.
- 5.1
Recordings and transcripts are deleted when the retention period you chose ends, or at once when you delete a recording. When your account is deleted, all material is deleted 48 hours after you confirm; database backups expire within 7 days.
- 5.2
Before deletion you can export your data as an archive from the dashboard; this is how the operator returns the data to you.
- 6.1
Frazo is operated by the owner of the frazo.app website (the “Operator”). The Operator is the controller of your personal data and the provider of the service.
- 6.2
Contact the Operator, including for questions about your data, requests and withdrawal of consent, at hello@frazo.app.
- 6.3
To ask for details about the Operator or about how your data is processed, write to hello@frazo.app.