Version 1 · November 3, 2026
This addendum applies to business customers ("you") of VinoyOS, operated by NOZU Digital Technologies LLC ("VinoyOS," "we"), and forms part of our Terms of Service. It covers personal data of your callers, chat visitors, texters and customers that we handle for you. If you need a signed copy, email ops@nozudigitaltechnologies.com.
For your callers, chat visitors, texters and customers, you are the controller (or business) and VinoyOS is your processor (or service provider). You own that data and are responsible for your relationship with those people, including having a lawful basis to contact them and giving them any notices the law requires where they are located. For your own account data (your name, email, login and billing details), VinoyOS is the controller, as described in our Privacy Policy.
We process that personal data only to provide VinoyOS to you: answering calls, chats and texts, recording and transcribing calls, booking, reporting, and support, in line with the Terms, your dashboard settings and your documented instructions. We do not sell it, do not use it for advertising, and VinoyOS does not train AI models on it. If we believe an instruction breaks the law, we will tell you. Our Privacy Policy explains the general, de-identified industry learning described in the Terms, and that some subprocessors' own terms let them use de-identified service data to improve their technology (see the notes on the Subprocessors page).
Our personnel with access to this data are bound to keep it confidential and are given access only as needed to run, secure and support the service.
You authorise the subprocessors listed on our Subprocessors page, which is part of this addendum by reference. We will update that page when we add or replace a subprocessor, and we remain responsible for their handling of your data. To be notified in advance, email ops@nozudigitaltechnologies.com; you may object on reasonable data-protection grounds, and if we cannot resolve it you may cancel.
These are the measures in place today:
We have not yet completed a SOC 2 audit or an independent penetration test (see Security). We do not offer a Business Associate Agreement at this time, so do not send protected health information through VinoyOS.
If we become aware of a breach affecting your personal data, we will notify you without undue delay, with the information we have to help you meet your own obligations.
Taking into account the nature of the service, we will help you respond to access, correction, deletion and other requests from your callers and customers. You can export your data from your dashboard at any time, and if a person contacts us directly we will refer them to you. Contact us at ops@nozudigitaltechnologies.com.
You can export your data from your dashboard at any time. Cancelling alone does not delete your data. When you delete your account, you have 30 days to undo it; after that, and once a VinoyOS operator approves it, we delete your call records, transcripts, texts, contacts, bookings and settings and blank your business record. Consent, opt-out, send and billing records are kept for 5 years as compliance evidence, and some records are not yet deleted automatically (including our stored copy of call audio files and team sign-in logins); we remove those on request. The full list is in section 7 of our Privacy Policy.
We will make available the information reasonably needed to show our compliance with this addendum, such as this page, our Security page and our subprocessor list, and will answer reasonable written security questionnaires. On-site audits are not offered at this stage.
VinoyOS processes data in the United States. If you need specific transfer terms for EU or UK personal data, email us before you sign up.
NOZU Digital Technologies LLC
1209 Mountain Road PL NE Ste N
Albuquerque, NM
ops@nozudigitaltechnologies.com