Data Privacy

Last Updated on : January 1, 2027

Teluul takes the protection of our customers' information seriously and is committed to complying with applicable data privacy laws, including GDPR, UK GDPR, and CCPA, when providing services to our customers. Data privacy is a collaborative effort, and Teluul is also committed to ensuring that you can use Teluul services while complying with your obligations under applicable data privacy laws. This page is designed to help you with your data privacy obligations by providing information about Teluul's data protection practices and the choices that you have regarding the data processed by Teluul when you use Teluul services.
 

Privacy Compliance at Teluul

Teluul has ongoing processes to protect your data and privacy rights:

Data Privacy Framework (DPF) Program

Teluul makes every effort to comply with the EU-US Data Privacy Framework (DPF), the UK Extension, and the Swiss-US DPF as set forth by the US Department of Commerce. 

Legal Review

Teluul collaborates with legal and other professional counsel to understand its role under both current and proposed data privacy laws and regulations such as GDPR, UK GDPR, and CCPA.

Teluul regularly reviews and periodically updates its Privacy Policy, Data Processing Addendum, and Terms of Service with respect to compliance with such data privacy laws and regulations.

Internal Data Audits

Teluul periodically reviews the types of data that it collects, the reasons for collecting that data, and when Teluul personnel might need to access it.

Vendor Audits

Teluul audits its vendors, both at the time of onboarding and thereafter, to ensure that they adhere to data privacy laws/regulations and sign all relevant Data Processing Addendums.

Communications

Teluul documents pertinent changes in its privacy compliance practices. Customer and partner notification occurs via email, this webpage, and the updates blog. Teluul also maintains an FAQ below that may be useful to review.

Ongoing Process Changes

Teluul continues to refine processes for how it performs customer support, builds services, and handles data. This includes internal documentation, training, and other processes.

Customer Content

For Customer Content (content transferred in and out of Teluul workflows or other Teluul services), you, the customer, are considered the "data controller" of that data from a privacy perspective.

In turn, Teluul is the "data processor" responsible for safeguarding Customer Content as it flows through Teluul's systems. 

As data controller, you are responsible for safeguarding Customer Content as you interact directly with services integrated with Teluul. 

 

Frequently Asked Questions
 

Where does Teluul store data? Teluul hosts data in AWS servers located in the United States, including customers' personal data and the data that is processed on behalf of customers.

How long is data stored in my Teluul account for? Please review our Data Retention/Deletion/Export page for information about Teluul's data retention/deletion practices.

Is there an option to have my data stored only within the EU? Teluul does not support this option.

Can EU-based customers transfer EU personal data to Teluul? Yes. In July 2023, the European Commission adopted its adequacy decision for the EU-US Data Privacy Framework. It concluded that the US ensures an adequate level of protection, compared to that of the EU, for personal data transferred from the EU to US companies participating in the EU-US Data Privacy Framework. Teluul makes every effort to comply with the EU-US Data Privacy Framework (DPF), the UK Extension, and the Swiss-US DPF as set forth by the US Department of Commerce.

Does Teluul have a Data Transfer Impact Assessment that I can review? Yes, please review our Data Transfer Impact Assessment page for more information about international data transfers to Teluul.

Does Teluul sell or market my data to third parties in any way? No, Teluul does not sell or market your data to third parties.

Where can I find Teluul's DPA? And, will Teluul sign my company's DPA? You can find Teluul's DPA on our Data Processing Addendum page. Teluul can't sign DPAs from other companies. However, our DPA should be sufficient in any customer relationship with Teluul. Teluul's DPA contains Standard Contractual Clauses (SCCs) for EU data and includes terms specific to how Teluul's platform works.

Does Teluul use subprocessors? Yes, Teluul engages with third-party subprocessors and Teluul affiliates to help provide services to our customers. Please review our Subprocessors page for more information.

Does Teluul have a vetting process for its subprocessors? Yes,  all of Teluul's subprocessors have undergone an internal legal and security review to assess how customer information is protected, from both privacy and security perspectives.

Does Teluul have EU and UK Representatives? No, Teluul does not currently have EU and UK representatives.

Can I use Teluul with healthcare/medical data? And/or, will you sign my company's BAA? The use of regulated healthcare and medical data including Protected Health Information (PHI) under HIPAA isn't supported on Teluul. Teluul also can't sign business associate agreements (BAAs) or equivalent agreements for handling PHI or other similar information.