Legal

Data Processing Information

Effective and last updated: 31 August 2026

Legal operator: Demetris Demetriou, trading as DD Cyprus1Click. Parakalo.ai is a service and trading brand operated by DD Cyprus1Click; it is not a separate company or tax entity.

This page summarises how DD Cyprus1Click, operating the Parakalo.ai service, supports customers acting as controllers of caller data. It is operational information, not a substitute for the signed data-processing agreement required for a particular customer relationship.

1. Roles and instructions

The customer business normally acts as controller for caller, contact, lead and appointment data. Demetris Demetriou, trading as DD Cyprus1Click, acts as processor and handles that data only to deliver, secure, support and maintain the configured Parakalo.ai service, plus any documented instructions in the service agreement.

2. Processing details

Subject matter

AI telephone reception, transcription, analysis, permitted workflow actions, notifications, support, security and recovery.

Duration

The service term plus configured retention, deletion and backup-expiry periods.

People

Callers, customer contacts, appointment attendees, customer staff and authorised platform users.

Data

Identity and contact details, call metadata and content, messages, business enquiries, appointments, language, workflow records and technical/audit information.

3. Processor commitments

• Process customer data on documented instructions and notify the customer if an instruction appears unlawful.
• Limit access to authorised persons under confidentiality duties.
• Maintain proportionate technical and organisational security measures.
• Assist with data-subject requests, security incidents, DPIAs and regulator enquiries where reasonably required.
• Delete or return data at the end of service as agreed, subject to lawful retention and backup expiry.
• Provide information reasonably necessary to demonstrate compliance and support agreed audits.

4. Subprocessors

Core categories include AI/voice and transcription infrastructure, telephony carriers, hosting and backup infrastructure, and transactional communications. Current core call providers include OpenAI and Zadarma. Customer agreements should define notice and objection arrangements for material subprocessor changes.

5. International transfers

Where personal data is transferred outside the EEA, the parties must use a valid transfer mechanism where required and assess supplementary measures appropriate to the transfer.

6. Security incidents

Parakalo will notify affected customers without undue delay after confirming a personal-data breach involving their data and will provide available information needed for the customer’s assessment and notifications.

7. Customer obligations

The customer is responsible for lawful instructions, transparency to callers, legal bases, data minimisation, accuracy of its business knowledge, user access, retention choices and identifying high-risk or special-category processing before enabling it.

8. Obtain a DPA

To request the current signed data-processing agreement, security information or subprocessor details, contact privacy@parakalo.ai.