Effective Date: 28 January 2026

Privacy Policy

This Privacy Policy explains how ServiaHelpdesk.com (“Servia”, “we”, “our”, or “us”) processes personal data when providing its AI-enabled customer service orchestration platform (the “Service”).

By accessing or using the Service, you acknowledge that Servia processes personal data in accordance with this Privacy Policy and applicable data protection law.

1. Who We Are & Our Role

Servia provides a customer service orchestration platform that enables businesses to route, analyze, and manage customer interactions across multiple channels and systems using AI-assisted workflows.

Primary Role – Data Processor

Servia primarily acts as a data processor on behalf of its customers.

All personal data submitted through the Service by customers or their end users (including messages, tickets, emails, voice interactions, and conversation history) is processed solely on documented customer instructions and for the purpose of delivering the Service.

Customers remain the data controller for all customer content and all AI-assisted processing configured within the Service.

Limited Platform Operations

Servia processes a narrow category of information required to operate, secure, and administer the platform itself, such as account administration, billing, security monitoring, and compliance obligations. For this limited operational data only, Servia determines the processing necessary to provide and protect the Service in accordance with applicable law.

2. Information Processed Through the Service

a. Account & Platform Information

(Processed for platform operations)

  • Name
  • Email address
  • Business or organization details
  • Account credentials and preferences
  • Billing and subscription information

b. Customer Content

(Processed on customer instructions)
Data submitted by customers or their end users, including:

  • Chat messages
  • Emails
  • Voice transcripts
  • Support tickets
  • Conversation history
  • Attachments and structured inputs

c. Device & Usage Data

Technical data automatically generated when accessing the Service, including:

  • IP address
  • Browser type
  • Operating system
  • Usage logs, timestamps, and interaction metadata

Such data is processed for security, performance, and operational integrity purposes and may be processed by Servia as a data controller where required for platform administration.

d. AI-Generated Outputs

AI-assisted outputs generated in response to customer-defined workflows, such as:

  • Summaries and classifications
  • Sentiment indicators and prioritization signals
  • Routing or response suggestions

These outputs are derived from customer-submitted data and remain under customer control.

3. Legal Bases for Processing

Servia processes personal data under one or more of the following lawful bases, as applicable:

  • Contractual Necessity – to provide and operate the Service
  • Legitimate Interests – to maintain security, reliability, and service performance
  • Legal Obligations – to comply with applicable laws and regulations
  • Consent – where required for optional features or communications

4. How Information Is Used

Servia processes data to:

  • Provide, operate, and support the Service
  • Execute customer-configured workflows and automation
  • Enable AI-assisted customer service functionality
  • Maintain platform security and prevent misuse
  • Improve reliability, performance, and accuracy
  • Comply with legal and regulatory obligations

All AI-assisted processing is initiated, configured, and controlled by customers.

5. AI-Assisted Processing & Output Accuracy

Servia uses probabilistic artificial intelligence systems to support automation, classification, summarization, and workflow orchestration.

AI-generated outputs are supportive tools only and may occasionally be incomplete or inaccurate. They do not constitute legal advice, factual guarantees, or final determinations unless reviewed or confirmed by a human operator.

Customers retain full control over AI-generated outputs within the Service and may:

  • Modify or override outputs
  • Flag content for human review
  • Request correction or deletion

Requests may be submitted to:
📧 legal@serviahelpdesk.com

6. Data Security & Protection

Servia implements industry-standard technical and organizational safeguards, including:

  • Encryption in transit: TLS 1.2 or higher
  • Encryption at rest: AES-256
  • Access controls: Role-based access, SSO, and MFA

Where supported by third-party AI providers, Servia applies zero-retention or limited-retention processing safeguards to ensure customer content is not retained beyond the immediate processing request.

7. Data Retention

Personal data is retained only for as long as necessary to:

  • Provide and maintain the Service
  • Fulfill contractual obligations
  • Comply with legal requirements
  • Resolve disputes and enforce agreements

Retention periods vary depending on the category of data, the nature of the Service configuration, and customer instructions. Customer-submitted content is retained in accordance with the customer’s configured retention settings or contractual requirements. Customers may request deletion, export, or anonymization of their data at any time, subject to applicable legal and contractual obligations.

When no longer required, data is securely deleted or anonymized in accordance with Servia’s retention policies.

8. Sub-Processors

Servia may engage trusted third-party service providers (“sub-processors”) to support Service delivery, including:

  • Cloud infrastructure and hosting providers
  • AI and automation technology providers
  • Security, monitoring, and analytics services

All sub-processors are contractually required to:

  • Process data only on Servia’s instructions
  • Maintain appropriate confidentiality and security measures

Servia will provide reasonable advance notice of material sub-processor changes where required by applicable data protection law.

Customers may request the current sub-processor list or object to changes by contacting:
📧 legal@serviahelpdesk.com

9. Customer Responsibilities

Customers are responsible for:

  • Ensuring a lawful basis for submitting personal data
  • Informing end users of automated or AI-assisted processing
  • Managing consent, notices, and data subject rights

Servia processes customer content strictly on documented customer instructions.

10. International Data Transfers

Personal data may be processed in jurisdictions outside the customer’s location, including the United Kingdom, European Union, and United States.

Where required, Servia relies on approved safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

11. Automated Processing & Human Oversight

Servia supports AI-assisted automation such as classification, prioritization, sentiment analysis, and workflow routing.

Servia does not make solely automated decisions producing legal or similarly significant effects without appropriate safeguards.

Where customers configure higher-impact automation:

  • Human review is available
  • Users may request human intervention
  • Automated outcomes may be contested

Requests may be submitted to:
📧 legal@serviahelpdesk.com

12. AI Model Training & Data Usage

Servia does not develop or train proprietary foundation AI models.

Customer content is processed exclusively to deliver the Service and is not used for independent AI model training.

Servia may use aggregated, anonymized, or de-identified operational metadata (such as system performance metrics) to improve platform reliability and functionality.

13. AI Interaction Disclosure (EU AI Act)

In accordance with the EU AI Act and applicable transparency obligations, Servia ensures that AI-assisted interactions are:

  • Clearly identified
  • Distinguishable from human responses
  • Supported by the option to request human assistance

14. Your Rights

Depending on your location and applicable law, you may have the right to:

  • Access personal data relating to you
  • Correct inaccurate or incomplete personal data
  • Request deletion or restriction of processing
  • Object to certain processing activities
  • Request human review of AI-assisted or automated processing

In responding to Subject Access Requests (DSARs), Servia will act in accordance with applicable data protection law. Where permitted under UK law, including the UK Data (Use and Access) Act 2025, Servia will take reasonable and proportionate steps to identify and provide relevant personal data, taking into account the volume, complexity, and technical structure of AI-assisted interaction data. This may include applying reasonable limits to searches of large-scale, complex, or continuously generated AI interaction logs where exhaustive retrieval would be disproportionate.

Where Servia acts as a data processor, requests relating to customer-submitted content should generally be directed to the relevant data controller, unless Servia is legally required to respond directly.

Requests may be submitted to:
📧 legal@serviahelpdesk.com

UK and EEA users also have the right to lodge a complaint with their local data protection authority.

15. Children’s Data

The Service is not intended for individuals under 16, and Servia does not knowingly collect personal data from children.

16. Changes to This Privacy Policy

Servia may update this Privacy Policy from time to time. Updates will be posted on ServiaHelpdesk.com with a revised effective date. Continued use of the Service constitutes acceptance of the updated Privacy Policy.

Trust & Transparency Resources

  • Sub-Processor List: (Link placeholder)
  • Security & Compliance: SOC 2 / ISO 27001 (when available)

Trust Center: (Future link)

Questions about how we handle your data?

Our team is here to help you understand our privacy practices and answer any concerns.