Legal
Data Processing Agreement
Last updated July 17, 2026
This summary describes how Qualmie processes personal data on your behalf. For a signed DPA for your organization, email hello@qualmie.com.
Roles
For the phone numbers and personal data you submit, you are the controller and Qualmie is the processor. We process that data only to provide the service and on your documented instructions.
Scope of processing
Subject matter: resolving phone-number liveliness. Data types: phone numbers and derived signals; account contact details. Duration: for the term of your account, plus limited retention for legal and security purposes.
Subprocessors
We use vetted subprocessors, each bound to equivalent obligations:
- Authentication provider (account sign-in)
- Stripe (payments)
- Amazon Web Services (hosting)
- Telecom data providers (resolving lookups)
- Rate-limiting / caching infrastructure
We will give notice of new subprocessors and a chance to object.
Security
We maintain appropriate technical and organizational measures: encryption in transit, hashed secrets, least-privilege access, and logging. Personnel are bound by confidentiality.
Data-subject requests & breaches
We assist you in responding to data-subject requests, and we notify you without undue delay after becoming aware of a personal-data breach affecting your data.
Deletion & transfers
On termination we delete or return your personal data, except where retention is legally required. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.