Draft terms for handling customer data.
Read the proposed terms for processing your workspace data. The parties, supporting schedules, and transfer arrangements are still being confirmed, so this draft cannot yet be accepted as an agreement.
1. Status and parties
The contracting parties, their responsibilities, the effective date, covered services, and relationship to the main terms are still under review.
2. Subject matter and duration
Processing is limited to providing, securing, supporting, and ending the Allocyn service for the subscription and documented transition or retention period.
3. Nature and purpose
Hosting, organizing, displaying, reporting, exporting, connecting, and, when enabled, assisting with customer-authorized project, workforce, client, time, commercial, and AI-supported workflows.
4. Data types and people
Workspace data may include identity, contact, account, project, workforce, client, time, skill, availability, financial, support, integration, audit, and AI records. It may relate to workers, contractors, clients, prospects, suppliers, and users. The data covered by your agreement is still to be confirmed.
5. Documented instructions
Allocyn processes customer data only for the service, documented configuration, authorized request, or legal obligation, and informs the customer where the law permits if an instruction appears unlawful.
6. Confidentiality and security
Confidentiality duties for staff and providers, and the security measures covered by the agreement, are still under legal review. The Security page describes current product controls and independent assessment status.
7. Subprocessors
Provider approval, notice of changes, objections, replacement arrangements, and provider obligations are still under review. The providers used by the live service are also being confirmed.
8. Rights, security, and impact-assessment assistance
The support covered by the agreement for privacy requests, security duties, breaches, data-protection impact assessments, and regulatory inquiries is still under review.
9. Personal-data breach notice
The notification method, information provided, cooperation, and response times for a personal-data breach are still under review. No fixed notification period is set by this draft.
10. Return and deletion
At termination, supported export and controlled deletion processes apply, subject to the agreed recovery period, backup cycles, and records that law requires the operator to retain.
11. Audit information
Access to supporting records, audit frequency, confidentiality, costs, and any on-site review are still under review. This draft does not establish a certification or independent assessment.
12. International transfers
Processing locations, providers, transfer arrangements, any required Standard Contractual Clauses, transfer-impact assessment, and additional safeguards are still being confirmed.
13. Liability, order, and signatures
Liability and which document takes priority are still under legal review. The final agreement will need to be accepted or signed by the parties.
14. Version history
Version 0.9 · 4 September 2026 · Draft for review.