Klientify Data Processing Agreement Version: 2.1 Last updated: August 20, 2026 1. When this DPA applies The Klientify Data Processing Agreement applies when Klientify processes personal data on behalf of a business customer acting as controller, including customer records, bookings, communications, pass data, payment status, operational workflow data, and Klientify Voice call data stored or processed through the Services. 2. What this page provides This page provides the current Klientify DPA template for review and contracting. The template is intended to be incorporated into the main commercial agreement or accepted as a standalone Article 28 GDPR data processing agreement where required. 3. Core scope of the template The template covers: - parties and role allocation, - subject matter, nature, and duration of processing, - categories of data and data subjects, - documented instructions and confidentiality, - security measures, - subprocessors, - international transfers, - assistance with data subject rights and incidents, - audit rights, - deletion or return of data at the end of the service. 4. Named subprocessors reflected in the template The current template references vendors used in Klientify operations, including Convex, Vercel, PostHog, Stripe, UseSend, Resend, Retell AI, SMSAPI, Twilio, Fly.io, OpenAI, and Google Calendar/Meet where the relevant functionality is enabled. Retell AI is used for Klientify Voice. Twilio and SMSAPI are direct subprocessors only when an account supplied by us is used for the customer; a customer-controlled account is the customer's integration, while Twilio used only within Retell remains in Retell's provider chain. The Klientify AI assistant service is an internal Klientify component rather than a separate provider; Fly.io hosts it and OpenAI provides its inference and embedding services. Customers receive at least 15 days' advance notice of an intended new or replacement subprocessor unless urgent security or legal circumstances make advance notice impracticable. A Customer may object during that period on reasonable data-protection grounds. We will seek a reasonable alternative; if none is available, the Customer may terminate the affected feature or materially affected Services before the new provider begins processing. 5. Execution If your legal or procurement team needs the DPA in connection with onboarding, procurement review, or contract execution, use the downloadable template below and send questions to contact@klientify.me.