Data Processing Overview

Zombotix LLC (“Zombotix”) provides AI voice automation software to business customers. This page summarizes how data-processing roles are typically allocated. It is not a signed Data Processing Agreement (DPA) and not a complete subprocessor list — those are agreed in customer contracts.

1. Typical roles

• Website / demo requests. Zombotix is generally a controller for contact details you submit through the Site.
• Customer voice deployments. For configured calls, the customer typically determines the purpose and means of the communication (campaign, audience, scripts). Zombotix processes audio, transcripts, metadata and outcomes under a service agreement as a processor or service provider, except where it acts as a controller for its own operations (billing, security, product improvement under contract).

2. Categories of processing

Depending on configuration: call audio, transcripts, session metadata, workflow settings, dispositions, technical logs, and account administration data. Customers must not send unnecessary sensitive personal data through demo forms.

3. Subprocessors and hosting

Hosting, speech, model and infrastructure providers vary by deployment. Current subprocessors, jurisdictions and transfer mechanisms are confirmed in the applicable agreement and security review — not invented on this page.

4. Retention and deletion

Retention schedules are deployment- and contract-specific. There is no single public retention period that applies to every environment. Deletion, backup handling and legal-hold requirements are agreed in writing.

5. Requesting a DPA

Eligible customers may request a DPA as part of contracting. Use Request DPA materials or email contact@zombotix.com with your legal entity, use case, and data-protection contact. See also Privacy and Security.

6. No compliance certification

This overview does not certify TCPA, HIPAA, SOC 2, ISO 27001 or any other standard. Technical features and contracts do not eliminate either party’s legal obligations.