AVZULO
Menu

Data Processing Addendum

Effective 1 November 2026 · version 2026-11-01. AVZULO is a trading name of LAL GROUP LLC, a Florida limited liability company, 1000 Brickell Ave, Suite 715, Miami, FL 33131, USA. Contact: info@avzulo.com.

This addendum forms part of the Subscription Terms. It applies when AVZULO processes personal data of a customer’s website visitors through the AI Website Chatbot. The customer is the controller and LAL GROUP LLC (AVZULO) is the processor.

  1. Subject matter and duration: answering visitor questions and recording enquiries, for the subscription period plus the retention period below.
  2. Data subjects and data: website visitors; message text, AI replies, and contact details visitors choose to provide (name, email, phone, message).
  3. Instructions: we process visitor data only to provide the chatbot as you configure it, unless the law requires otherwise.
  4. Confidentiality: only authorised personnel bound by confidentiality may access visitor data.
  5. Security: encryption of messages and contact details at rest; encryption in transit; each widget limited to your registered website addresses; per-customer isolation; multi-factor authentication for administrators; audit logging.
  6. Subprocessors: Render (hosting, Germany) and OpenAI (reply generation, USA; requests sent with storage disabled). We give 30 days’ notice before adding or replacing a subprocessor, and you may object by cancelling.
  7. Assistance: we help you respond to data-subject requests and with security and impact assessments, as far as reasonably possible.
  8. Breaches: we notify you without undue delay, and within 48 hours of becoming aware of a personal data breach affecting visitor data.
  9. Deletion: visitor conversations and enquiries are deleted about 90 days after each conversation; on request after cancellation, remaining visitor data is deleted within 30 days.
  10. Audits: we make available the information needed to demonstrate compliance with this addendum.
  11. International transfers: transfers to the USA rely on the UK Extension to the EU–US Data Privacy Framework where the recipient is certified, or on the UK International Data Transfer Addendum.
  12. Your duties: tell your website visitors about the chatbot in your own privacy notice, and do not configure it to collect special-category data.