Data Processing Agreement

This DPA sets out the terms under which Raritone processes personal data on behalf of customers.

Effective Date: 3 February 2026

This agreement applies to all customers processing personal data through Raritone services under GDPR, CCPA, or similar data protection laws.

Roles & Responsibilities

Data Controller

The customer who determines the purposes and means of processing personal data.

  • Determines what personal data is processed
  • Ensures legal basis for processing
  • Responds to data subject requests

Data Processor

Raritone, who processes personal data on behalf of the customer.

  • Processes data only as instructed by the Controller
  • Implements appropriate security measures
  • Assists with data subject rights requests

Processing Activities

Scope:

Processing of personal data to provide Raritone services including voice generation, transcription, and related APIs.

Duration:

For the term of the customer agreement and as required by law.

Nature:

Processing includes collection, storage, processing, transmission, and deletion of personal data.

Categories of Data:

Name, email, company, voice data, usage logs, and technical data.

Security Measures

AES-256 encryption at rest
TLS 1.2+ encryption in transit
Role-based access control (RBAC)
Multi-factor authentication (MFA)
Regular security audits
Incident response procedures
Data backup & redundancy
SOC 2 Type II compliance

Sub-processors

Raritone may engage the following sub-processors to provide services:

  • Amazon Web Services (AWS) - Cloud infrastructure and storage
  • Stripe - Payment processing
  • SendGrid - Email delivery

Customers will be notified of any changes to sub-processors.

Data Subject Rights

Raritone will assist customers in fulfilling data subject requests for:

Right to access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object

Questions About This DPA?

For enterprise customers or specific DPA requirements, contact our team:

[email protected]