Data Processing Agreement

Last updated: 24 October 2026

This Data Processing Agreement (DPA) is part of our Terms of Service. It applies when you (the “controller”) use HelpXon to handle personal data of your customers, and HelpXon (the “processor”) processes that data for you. It is written to meet the EU and UK GDPR.

1. What we process

  • People: your customers, website visitors who use your chat, and your team members.
  • Data: names, email addresses, messages, files, IP address and browser details.
  • Purpose: only to provide HelpXon to you, for as long as your account is open.

2. Our promises

  • We process the data only on your instructions, which are given by how you use HelpXon.
  • Our staff who can see the data must keep it confidential.
  • We keep it secure, as described in our Privacy Policy.
  • We help you answer requests from people who want to see or delete their data.
  • We tell you without undue delay, and within 72 hours, if a breach affects your data.
  • When you ask us to close your account, we delete the data within 30 days, unless the law asks us to keep it.

3. Sub-processors

You agree that we use the sub-processors listed in our Privacy Policy (section 5): Contabo, AWS, Postmark, Cloudflare, Paddle, OpenRouter and its AI model providers, and Google. We tell you by email before we add a new one. You may object within 14 days.

4. Transfers outside your country

Data may be processed outside the EU or UK. When that happens, we rely on the EU Standard Contractual Clauses or other legal transfer tools.

5. Audits

On request, we give you the information you need to check that we follow this DPA. Write to [email protected].