soolisAI is committed to protecting personal data and complying with European and UK data protection law. This page summarizes our GDPR obligations and the key terms of our Data Processing Addendum.
1. Overview
soolisAI LLC ("soolisAI") is committed to compliance with the European Union's General Data Protection Regulation ("GDPR") and the United Kingdom GDPR. This page explains how we process personal data in our role as both a data controller (for our website and marketing activities) and a data processor (for data customers upload to our platform), and summarizes the key terms of our Data Processing Addendum ("DPA").
2. Data Processing Roles
When you provide us your contact details through our website or interact with our marketing communications, soolisAI acts as the data controller. When you use our AIaaS platform and upload your customer, employee, or other personal data, you act as the data controller and soolisAI acts as the data processor, processing personal data solely on your documented instructions to provide the contracted Services.
3. Lawful Bases for Processing
As a data controller, soolisAI processes personal data on the following lawful bases: (a) the performance of a contract with you; (b) our legitimate interests in operating and improving our business, where such interests are not overridden by your rights; (c) your consent, where required; and (d) compliance with legal obligations. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
4. Data Subject Rights
Under the GDPR, individuals have the right to access, rectify, erase, restrict, and port their personal data, as well as the right to object to processing and the right not to be subject to automated decision-making with legal or similarly significant effects. To exercise any of these rights, contact us at privacy@soolisai.com. We will respond to verified requests within one (1) month, subject to any legal extensions.
5. Categories of Personal Data
As a processor, we may process the categories of personal data you choose to upload to the platform, which may include contact details, communications content, transaction data, and other information necessary to deliver our Services. We do not require or request sensitive special-category data, and you are responsible for ensuring you have a lawful basis to provide any personal data you submit to the Services.
6. Sub-processors
soolisAI may engage sub-processors to help deliver the Services, such as hosting, analytics, and customer support providers. We maintain a current list of sub-processors, which is available upon request, and we impose data protection obligations on all sub-processors at least as protective as those in our DPA. We will notify you of any intended changes to our sub-processors and provide you an opportunity to object.
7. International Data Transfers
Where personal data is transferred outside the European Economic Area or the United Kingdom, soolisAI ensures that appropriate safeguards are in place, including the use of the European Commission's Standard Contractual Clauses (and the UK's International Data Transfer Agreement or Addendum where applicable), supplemented by any additional measures required under applicable law.
8. Security Measures
soolisAI implements technical and organizational measures designed to protect personal data, including encryption in transit and at rest, access controls, authentication, logging and monitoring, regular security testing, and personnel confidentiality obligations. Our closed-model architecture keeps customer data within a secure perimeter and prevents leakage to public AI models.
9. Breach Notification
In the event of a personal data breach affecting data we process on your behalf, soolisAI will notify you without undue delay and provide reasonable cooperation and information to assist you in meeting your own notification obligations to supervisory authorities and affected individuals, where required.
10. Data Processing Addendum (DPA)
A Data Processing Addendum incorporating these terms is available to our customers and is incorporated by reference into our service agreements. The DPA sets forth the subject matter, duration, nature, and purpose of processing, the types of personal data and categories of data subjects, and each party's respective obligations. To request an executed copy of the DPA, please contact us at privacy@soolisai.com.
11. Data Protection Officer
Questions or concerns regarding GDPR compliance or this page may be directed to our privacy team at privacy@soolisai.com. You also have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your personal data in accordance with applicable law.