You (the business customer) are the business/controller. FirstCue, LLC is your service provider/processor. FirstCue processes personal information — including call recordings, transcripts, and caller intake data — solely to provide the service to you. Terms such as "personal information," "sell," "share," "service provider," and "verifiable consumer request" have the meanings given in the California Consumer Privacy Act (CCPA) and its regulations, including regulation §7051.
You may take reasonable steps to monitor FirstCue's compliance — including manual reviews, automated scans, or requesting FirstCue's assessments/attestations — on reasonable notice.
FirstCue will assist you in responding to verifiable consumer requests (to know/access, delete, and correct) by providing, deleting, or correcting the relevant consumer's personal information in FirstCue's systems within the time the CCPA allows.
FirstCue may use subprocessors (telephony/voice, payments, email, and cloud infrastructure) but binds each by written contract to data-protection and use-limitation obligations at least as protective as those here. FirstCue remains responsible for its subprocessors.
FirstCue maintains reasonable administrative, technical, and physical safeguards appropriate to the personal information, including encryption in transit and access controls, and will notify you without undue delay after becoming aware of a security incident affecting the personal information.
On termination or your request, FirstCue will delete or return the personal information it processes for you, except copies required to be retained by law, which remain subject to this DPA.
You accept this DPA at signup by checking "I agree" together with the Terms of Service and Privacy Policy (clickwrap). No separate signature is required. Enterprise clients may request a separately signed copy.
Questions about this DPA? Email privacy@firstcue.ai. FirstCue, LLC.