Data Processing Addendum

The short version

For calls answered by an agent we run for you, you are the controller of your callers' data — you decide why it's collected. LinearZeta LLC is your processor (service provider): we handle that data only to deliver the service, on your documented instructions, and under our agreement with you.

If your business needs this set out as a binding contract — a Data Processing Addendum (DPA) — we'll put one in place. It forms part of our Terms of Service. Email hello@linearzeta.com and we'll work through the terms with you.

What the DPA covers

• Roles — you as controller, LinearZeta as processor, and the sub-processors below as our processors.
• Scope & purpose — the categories of caller data we process (call audio and transcripts, contact and booking details, returning-caller records) and the limited purposes we process them for.
• Security & data minimization — including that the returning-caller record is keyed on a one-way hash rather than a readable phone number, that moment-to-moment performance data carries no caller details at all while the longer-term booking record behind your reporting identifies a caller only by that same one-way hash, is retained indefinitely for reporting, and is erased on request, and that every record is scoped to your business alone. Where you need to ring someone back — a callback request, a booked appointment, a pickup order — contact details are held in readable form for that purpose under a retention limit, and no card data is ever captured.
• Sub-processors — the list below, and how we notify you of changes.
• Deletion & return — caller-record deletion on request and what happens to data when the service ends.
• Assistance — supporting you with consumer-rights requests that reach us about your callers.

Sub-processors

These are the same sub-processors listed in our Privacy Policy. Each processes data only to provide its service to us:

• Twilio — telephony for the calls the agent answers.
• ElevenLabs — conversational AI and speech-to-text transcription.
• Cloudflare — hosting, CDN, cookieless analytics, and our caller-memory and booking infrastructure.
• Buttondown — website lead records from the contact form (not used for your callers' data).
• Resend — delivery of the email alert that a contact-form lead came in (not used for your callers' data).
• Cal.com — scheduling for the free call audit booked from this website.

If you connect your own scheduling or intake system, that system is governed by your own agreement with that provider, not this DPA.

Putting a DPA in place

Email hello@linearzeta.com and we'll put a Data Processing Addendum in place for signature. If we change this summary or the sub-processor list, we'll update the effective date above.