Data Processing & Protection

Defined Terms

Application within Data Processing & Protection. “ARCAMUSA,” “we,” “us,” and “our” mean Arcamusa, Inc., operator of ARCAMUSA Wholesale. “Customer” means the business entity authorized to use the Wholesale Services. “Traffic” means calls, signaling, metadata and related activity submitted to or received from the Wholesale Services. “Caller ID” or “CLI” means calling-party identification information. “Downstream Customer” and “End User” mean persons or entities using services through Customer.

Application within Data Processing & Protection. “Agreement” includes applicable online terms and policies together with any signed MSA, Order Form or Rate Sheet. “CDR” means a call detail record used for operational, billing, reconciliation, security or compliance purposes. Defined terms apply consistently across the Legal & Trust Center unless a document expressly provides a narrower meaning.

Roles & Scope

Depending on context and applicable law, each party may act as an independent controller/business or ARCAMUSA may process specified Customer Data as a processor/service provider. The applicable agreement and actual processing determine roles.

Instructions & Confidentiality

Where ARCAMUSA processes data for Customer, processing is limited to documented service instructions, the Agreement, security, compliance and applicable law. Personnel and contractors with access should be subject to appropriate confidentiality duties.

Security & Incident Handling

Reasonable safeguards should reflect the nature of the information and service. Suspected incidents are assessed and handled according to applicable contractual and legal duties; this page does not invent notification periods.

Service Providers & Subprocessors

ARCAMUSA may use service providers for legitimate operational functions subject to appropriate obligations. No public subprocessor list is supplied until actual vendors, legal need and permitted disclosure are confirmed; voice upstreams are not exposed merely to populate a list.

Rights Assistance & Legal Requests

Reasonable assistance with validated rights or legal requests is governed by role, applicable law, technical feasibility and the Agreement. ARCAMUSA may resist overbroad or invalid requests where appropriate.

Deletion, Return & Transfers

Deletion or return obligations and cross-border transfer mechanisms apply only when contractually and legally relevant. No universal deletion deadline or international-transfer certification is represented.

DPA Pathway

A formal data-processing addendum may be made available by agreement after scope and counsel approval. This public page is not itself an executed DPA.

Roles and Scope

The parties’ roles depend on the service, data and governing law. A Customer may act as controller or business and ARCAMUSA as processor or service provider for defined activities, while each may act independently for its own legal duties.

Documented Instructions

Where ARCAMUSA processes Customer Data on Customer’s behalf, the Agreement and approved service configuration constitute documented instructions subject to applicable law.

Confidentiality

Personnel and providers with authorized access are subject to confidentiality or comparable duties appropriate to their role.

Security Measures

Measures are selected based on the nature of processing and risk and may include access controls, authentication, logging, transmission safeguards, monitoring and incident procedures.

Subprocessors

Providers may support hosting, communications, security, support or other functions under contractual and security requirements appropriate to their services. Specific lists or notice rights apply only where agreed.

Legal Requests

Requests for Customer Data are reviewed for apparent validity, scope and authority; notice may be provided where legally permitted and contractually required.

Security Incidents

Relevant incidents are investigated, contained and documented. Notification obligations depend on applicable law, the parties’ roles, affected data and controlling agreement.

Assistance

Reasonable assistance with rights requests, security assessments or regulatory duties is provided where required by law or the controlling DPA and may depend on the Customer’s information and cooperation.

Return and Deletion

Return, deletion or retention follows the controlling Agreement, technical capability and legal obligations; backup, security, dispute or regulatory records may require limited continued retention.

International Processing

Cross-border processing and transfer safeguards are addressed where applicable to the data, jurisdictions and relationship.

DPA Availability

A data processing addendum may be considered for an approved relationship where legally required or commercially agreed. This page is not a signed DPA.

Contract Hierarchy & Related Documents

This statement describes the framework available when ARCAMUSA processes personal data for a customer under documented instructions. The Privacy Notice covers ARCAMUSA’s independent collection, and the CPNI policy applies separately to information meeting the telecommunications-law definition.

A signed data processing addendum controls processor-specific commitments, including any approved transfer mechanism or subprocessor term. It does not alter service pricing, traffic rules, retention required by law, or ARCAMUSA’s independent security and fraud-prevention obligations.