Data Processing Addendum

This Data Processing Addendum describes how Semiora processes customer personal data when providing the Services.

For customer workspace data, booking data, integration data, and automation recipient data, Semiora generally acts as a processor on behalf of the customer tenant.

• Subject matter: operating scheduling, booking, workflow, integration, and channel automation services.
• Duration: for the term of the customer relationship plus any legally required retention period.
• Data subjects: customer users, team members, invitees, automation recipients, and support contacts.
• Data categories: account data, scheduling data, message/contact data, integration metadata, billing metadata, and support records.

Semiora processes customer personal data to provide the Services, follow documented customer configuration, maintain security, comply with law, and support the customer.

• Access controls and role-based permissions.
• Encrypted transport for production services.
• Separation of tenant data by application controls.
• Audit and security monitoring for sensitive operations.
• Token handling and integration cleanup controls.

Semiora uses subprocessors to host, secure, operate, bill, and support the Services. The current subprocessor list is published separately and may be updated as the Services evolve.

Upon valid customer request, Semiora will export, delete, or anonymize customer personal data where technically feasible and legally permitted. Some billing, audit, or security records may be retained where required by law or legitimate security needs.

DPA questions can be sent to supportsemiora@gmail.com.