Data processing terms
Data responsibilities for the AYZYNX service
These operational terms explain how AYZYNX processes personal data for a hotel when providing the contracted service. The accepted service agreement and any signed data-processing addendum take precedence where they contain more specific terms.
Roles and instructions
For hotel-controlled guest and operational information, the hotel generally determines why the information is used and AYZYNX processes it to provide the configured service. AYZYNX also acts as an independent controller for its own account administration, security, billing and legal records. AYZYNX processes hotel-controlled data only on documented service instructions unless law requires otherwise.
Subject matter and duration
Processing covers configuration and delivery of the website concierge, optional AI receptionist, client workspace, analytics, support and agreed integrations for the duration of the service and the applicable retention period.
Data and people
Data may include hotel contact and account information, approved hotel knowledge, guest questions, conversation and call text, masked telephone routing information, lead details a guest intentionally submits, service events and support records. People may include hotel staff, prospective clients, guests, callers and support contacts.
Confidentiality and security
AYZYNX restricts production access, uses authenticated tenant-scoped routes, validates supported provider webhooks, keeps credentials outside source control, and logs operational events without intentionally recording secrets. Personnel and providers with access are expected to protect confidential information.
Subprocessors
The hotel authorises AYZYNX to use the providers identified on the Subprocessors page for the contracted service. AYZYNX remains responsible for appropriate provider selection and contractual safeguards and will address material provider changes under the applicable agreement.
Individual rights and assistance
AYZYNX will provide reasonable assistance with verified access, correction, deletion, restriction, objection or portability requests relating to service data. The hotel should send requests promptly to contact@ayzynx.com with enough information to locate the relevant tenant and record without sending unnecessary sensitive data.
Incidents
AYZYNX investigates confirmed security incidents affecting service data and will notify the relevant hotel without undue delay when the incident requires client action or notification under the applicable terms and law. Reports should be sent to contact@ayzynx.com with the subject ‘Security incident’.
Return and deletion
On termination, AYZYNX will apply the agreed export, retention and deletion process. Subscription cancellation does not trigger immediate destruction: access, operational continuity, legal records, security evidence and a reasonable export period must be handled first.
International processing
Some providers may process information outside the United Kingdom. AYZYNX uses the provider’s applicable UK data-transfer terms and safeguards where required and can provide relevant provider information for client review.
Professional review
These terms describe AYZYNX’s operational position and are not a claim of certification or solicitor approval. A client requiring negotiated terms should contact AYZYNX before activating the service.
Last updated 1 September 2026 · Questions: contact@ayzynx.com