Legal

Data Processing Addendum

Effective date: 21 September 2026 · Version 2026-09-21

This DPA is between the shop (“Customer”) and Answer With Iris, LLC (“Processor”). It is part of the Terms when the shop buys the desk.

1. Roles

Customer is the controller of caller data. Answer With Iris, LLC is the processor.

2. What we process

Inbound call audio, recordings, transcripts, caller contact details the caller gives, job notes we send the shop, calendar slots the shop turned on, and the shop’s account and billing data.

3. Purpose

Only to run the after-hours / overflow desk the shop bought: answer, take a message, alert the shop, book what the shop enabled. No marketing texts to callers. No model training on caller audio.

4. Duration

While the account is open, then the clocks in the Privacy Policy.

5. Retention

Recordings and transcripts: 30 days default, then delete or anonymize unless a legal hold or the shop’s written order says longer.

Invoices, tax, billing addresses, terms-accept log: 4 years (Texas sales-tax window).

Cards: Stripe only.

6. Subprocessors

Listed at /subprocessors. We will post a change that adds a vendor who will hear caller audio at least 30 days before it goes live. The shop may cancel before that date.

Optional shop-connected boards and calendars run only when the shop enables them on Booked Desk or Shop Desk.

7. Security

Access limited to Travis W. Barnes and the systems on the subprocessor list. No public street on this site.

8. Breach

We notify Customer without unreasonable delay after we confirm a breach of caller or shop personal data.

9. Help with requests

If a caller asks to access or delete data, we point them to the shop (controller) and help the shop from our logs where we still have them.

10. End of service

On cancel: stop the desk, delete recordings on the 30-day clock, keep tax and invoice records 4 years.

11. Not HIPAA / not advice

This is not a covered healthcare, legal, or financial service. Answer with Iris can be wrong. Emergencies: hang up and dial 911.

12. Law

Texas law. Venue Tarrant County, Texas. Same as Terms.

If this DPA and the Terms conflict on data handling, this DPA wins for data handling only. A paid-desk MSA and Order Form still win if counsel later writes them and they conflict.