Data processing agreement.

For customers who process other people's personal data, such as callers, through askcalls.com.

Draft — to be reviewed by counsel

Roles

You are the controller of the call content you upload. The operator of askcalls.com processes it on your instructions as your processor.

Nature of the processing

Storage of ciphertext and keyed tokens, search over them, and on your request, streaming of audio to a transcription provider and of calls to an AI provider for questions and for the translations your rules ask for.

Security measures

Encryption on your device with AES-256-GCM under keys we never hold, keyed HMAC tokens for search, a strict content security policy on app routes, audit logging of reads and writes, and a leak test on every change.

Subprocessors

The subprocessors page lists every subprocessor, what it receives and where. We will update it before adding one.

Transfers

Data is stored in the EU (Frankfurt). Transcription and AI requests go to the providers listed, which may process them outside the EU.

Deletion and return

You can export your data at any time, decrypted on your device, and delete it. Account deletion removes the wrapped keys first, then the data.

Last updated 13 November 2026

Questions about this document go to the address published on askcalls.com once the operating entity is chosen.

Ask your calls anything.