Data Processing Terms

Where applicable, the customer acts as the controller or business responsible for determining the purposes of processing, and Walfia.ai through Datario acts as a processor or service provider acting on the customer’s instructions. These roles do not apply universally in every jurisdiction or circumstance.

The processing covers submitted data used to provide Datario cleaning and validation functionality for the time necessary to perform the requested service and any configured retention period.

Processing may include cleaning, validation, quality analysis, duplicate detection, structured extraction, scoring, review, and export generation.

Depending on what the customer supplies, data may include employee or HR records, contact information, sales data, lead or customer information, business records, and other structured data. Datario does not require customers to submit special-category or sensitive data.

Depending on the customer’s dataset, data subjects may include employees, applicants, customers, leads, and business contacts.

Datario processes submitted data to provide the requested service according to the customer’s documented or product instructions, subject to applicable law.

Walfia.ai intends to apply reasonable confidentiality obligations appropriate to access to customer data.

Security measures reflect the implementation actually in use. This document does not represent controls that are not deployed, and does not claim a security certification.

Subprocessors may be used to provide the service. Expected providers include Supabase, Google Cloud, Stripe where billing applies, and Lovable where applicable.

Taking into account the nature of processing and product capability, Datario may provide reasonable assistance to customers responding to applicable data-subject requests.

Relevant security incidents will be handled according to applicable obligations and production incident-response procedures.No specific notification period is promised here.

Return or deletion behavior follows the agreed service configuration, retention policy, and applicable requirements.

Appropriate information may be provided where contractually or legally required and reasonably available. These terms do not promise unrestricted customer audits or claim a certification.