Data Processing Agreement
Last updated: 2026-10-22
Changed 2026-10-22: The Privacy Policy now gives admin@atpconsultancy.com as the address for privacy questions and deletion requests. The address is the only change; no term, right or obligation changed.
Changed 2026-10-21: The product formerly called Front Desk is now called Spes Voice in every document. The Terms now say that paid plans charge a one-time setup and the first month at checkout. The Terms and the Privacy Policy now explain that calls with ATP's AI assistant may be recorded and transcribed, that the assistant says so at the start of each call and stops recording if you ask, what ATP uses them for, who can access them, that no fixed retention period is set yet, and how to have them deleted.
Changed 2026-10-20: The Terms, the Privacy Policy and the DPA now describe what ATP provides as services plus access to an online client portal (Spes), and name the portal in the clauses that already covered it; that wording changes no right or obligation. The Terms and the Rep / Affiliate Agreement now choose the laws of the State of New Hampshire, and disputes about them are heard only in the state or federal courts sitting in New Hampshire.
Changed 2026-10-15: The Terms and the Privacy Policy now name the company by its full legal name, ATP Consulting LLC. The name is the only change; no term, right or obligation changed.
Changed 2026-09-26: The product formerly called Riley is now called Front Desk. The name is the only change; no term, right or obligation changed.
This DPA applies when ATP processes personal data on your behalf (for example, the data in calls Spes Voice handles for your business). It supplements the Terms.
Roles
For the call and customer data ATP handles for you, you are the data controller and ATP is the data processor. ATP processes that data only on your documented instructions and to provide the service.
Scope of processing
Subject matter: operating the AI phone agent and the client portal (Spes). Data: caller phone numbers, call transcripts and optional recordings, messages, bookings, and contact details. Data subjects: your callers and contacts. Duration: while your account is active.
Subprocessors
You authorize ATP to use the subprocessors listed in our Privacy Policy (Vapi (telephony + speech-to-text / text-to-speech); Anthropic (the AI model); Supabase (database + authentication); Stripe (payments); Twilio (phone numbers + SMS); Resend (email)). ATP remains responsible for their compliance and will give notice of material changes.
Security
ATP applies reasonable technical and organizational measures: encryption in transit, access controls, least-privilege service credentials, and isolation of each tenant data.
Assistance, breach, and deletion
ATP will help you respond to data-subject requests and, without undue delay, notify you of a personal-data breach affecting your data. On termination, ATP will delete or return your personal data except where law requires retention.