Zidder team plan terms

Version of 2 November 2026

Leer estas condiciones en castellano

These terms govern subscriptions to Zidder's team plans: Starter, Team and Scale. Their annex is the data processing agreement for your team's data. The company or self-employed professional that subscribes will accept them when paying, by ticking the box on the payment page.

1. Who provides the service

Zidder is a service of Creactia, which is the trade name of Mario Hernández Pérez-Calvo, a sole trader (empresario individual) in Spain.

Provider

Mario Hernández Pérez-Calvo, sole trader

Trade name

Creactia

Tax ID (NIF)

52596335G

Address

Av. Josep Ferrer i Domingo 43, 08191 Rubí (Barcelona)

Email

[email protected]

Website

zidder.com. The app is at app.zidder.com.

In these terms, “Zidder” or “we” means that provider. “You” or “your company” means the company or self-employed professional that subscribes to a team plan. “Your team” means the people your company adds to the app. “Your managers” means your team's owner, admins and coaches, explained in clause 5.

2. What the team plans are

Zidder is an app for rehearsing sales calls out loud. Each person on your team will talk to a virtual customer that is an artificial intelligence and, when they hang up, will receive a report with their score and what they should work on. The team plans are for companies with several reps. The owner and the admins will add each person to the app, and the team's managers will prepare the practice calls and follow how each person is progressing.

2.1 What each plan includes

A practice call is a call of up to 90 seconds with the virtual customer. Each practice call follows a mission, which is a specific exercise of 20, 45 or 90 seconds. Practice calls form a pool shared by the whole team, and each rep on the plan adds 150 a month. The buffer is 20 % of that pool, and your team will be able to use it once everything else runs out (clause 12.2). Seats, coaches, admins and extra reps are explained in clauses 5 and 7.

2.2 What all three plans include

For as long as your subscription lasts, your team will have:

1. A personal account for each person you add at app.zidder.com, within your plan's seats.
2. A virtual customer who will know what your company sells. Your managers will tell Zidder what your company sells, who it sells to and who your reps usually talk to, and they will be able to upload sales material so that the app can pull out the claims your reps can use on calls. Your team will practise with built-in cases, with the practice calls your managers prepare and with the companies they research.
3. Company research. Each person will be able to type the name of a company (and its website, if they like) and Zidder will look for public information about it with Google's search engine. It will use what it finds to prepare a profile, and the virtual customer in the call will work at that company. The customer will always have a made-up name. The search limits are in clause 12.3.
4. A report after each practice call, with the transcript of the call, a score from 0 to 100 split into seven sections, a summary and the correction that will help most in the next call. If the person does not speak during the call, there will be no report (clause 12.1). If the assessment fails, it can be requested again.
5. The option to repeat the call with the same customer to work on that correction, and then to move on to another customer.
6. A dashboard for managers, where they will see how each rep is progressing, assign practice calls, and review, correct or challenge each score.
7. Control over your team's data. Your company will choose how long transcripts and detailed reports are kept (0, 7, 30 or 90 days, or one year). The owner and the admins will be able to export each rep's data from the app and delete a rep with their full history. For the other accounts, we will do it when your company asks us to (section A.10 of the annex).

The app also has other features, for example for preparing practice programmes or for recording how calls with customers went. Those features may change over time, as explained in clause 16.

Features that the website presents as “Coming soon” are outside the service you subscribe to. When they become available, we will tell you whether they are included in your plan or offered separately, and at what price.

2.3 Monthly periods

Practice calls are counted in one-month periods. Each period starts on the same day of the month on which you made your first payment. If a month does not have that day, the period starts on the last day of that month.

With the annual plan you pay for the year in advance, but practice calls are still counted month by month. Your team will have its plan's pool and buffer in each of the twelve months.

2.4 What you need

To practise, each person will need an up-to-date browser on a computer or a phone, a microphone and an internet connection.

2.5 Language

The app, the virtual customer and the reports are in Spanish (Castilian). Your team will speak with the virtual customer in Spanish, and reports, scores and corrections will be written in Spanish. The app has no English version.

3. Who can subscribe

The team plans are for professional use only. Companies and professionals with a valid tax ID or VAT number can subscribe to them, to train their own sales team. They are not offered to consumers.

By subscribing, you declare that you are acting within your business or professional activity and that the tax ID or VAT number you give us belongs to the company or professional that subscribes. If you subscribe on behalf of a company, you also declare that you are authorised to bind it. The person who subscribes must be 18 or older.

4. How to subscribe

1. On zidder.com you choose Starter, Team or Scale, monthly or annual.
2. Stripe's payment page opens. Stripe is our payment provider. There you enter your email, your payment details, your billing address, your tax ID or VAT number and your company name.
3. Before paying you will see the amount including taxes and you will have to accept these terms, with their data processing annex, by ticking the box.
4. When you press the payment button you take out the subscription. You will see a confirmation on screen and we will send you the receipt by email.

Extra reps, practice packs and the Enterprise plan are arranged by email (clause 7).

If you make a mistake. Before paying you can review and change everything you have entered on the payment page. If you later spot a mistake in your billing details, write to us and we will correct it.

Where to find these terms. They are published at zidder.com/team-terms.html, and the Spanish version at zidder.com/condiciones-equipo.html, with the date of their version. You can save or print them. We will keep the version you accepted and the date on which you did so, and we will give it to you if you ask for it.

Language of the contract. The contract is entered into in Spanish. These English terms are a translation of the Spanish version. If the two versions differ, the Spanish version prevails.

5. Sign-up, access and the people on your team

Within one working day of payment, we will send a link to the email address given on the payment page. The person who paid can use it to create their password and sign in to the app as the team's owner. The link is valid for 7 days and can be used only once. If it expires, ask us for another one.

The subscription and its first period start on the day of payment.

If, for reasons on our side, we take longer than one working day to send the link, you may cancel and we will refund what you have paid.

Roles in the app. Each account will have one of these roles:

• Owner (Propietario). The person who paid. Their account is created at sign-up.
• Admin (Administrador). Adds the people on the team and manages their accounts, just like the owner.
• Coach. Prepares and assigns practice calls, reviews scores and follows how each rep is progressing. The owner and the admins can do this too.
• Rep (Comercial). Practises and receives their reports.

The people on your team. From the app, the owner and the admins will add the reps and, if they wish, coaches and other admins. The app will generate a link for each person to create their password. Whoever added them will send it to them. It is valid for 7 days and can be used only once.

Seats. Each plan covers a number of reps active at the same time: 5 in Starter, 10 in Team and 20 in Scale, plus any extra reps you add (clause 7). If you delete a rep's account in the app, their seat will be free for someone else.

Coaches and admins. They do not take up a seat and they can also practise. Each plan allows one for every 5 reps, counting extra reps, with a minimum of 2. Without extra reps that means 2 in Starter, 2 in Team and 4 in Scale. The owner's account does not count towards that number and does not take up a seat either.

Personal accounts. Each account belongs to one person only. Your company is responsible for what is done with its team's accounts, unless it has told us that someone has accessed one without permission. If you think this has happened, write to us straight away and we will close the open sessions. The owner and the admins can also send that person a new link to change their password and, if they are a rep, delete their account. If that person is an admin, only the owner can send them the link. If the owner's password needs changing or another account needs closing, we will do it when your company asks us to.

6. Price, taxes and payment

6.1 Price

The price is per team and covers the reps included in the plan. Extra reps and packs are paid separately (clause 7).

6.2 Taxes

Stripe calculates VAT from your billing address and your tax number:

• In mainland Spain and the Balearic Islands, 21 % applies. In the Canary Islands, Ceuta and Melilla, Spanish VAT does not apply.
• A company in another European Union country with a valid VAT number is not charged Spanish VAT. The buying company accounts for it (reverse charge).
• Outside the European Union, we apply whatever the law requires in each case.

6.3 How we charge

We charge in advance, at the start of each period, using the payment method you chose on the payment page. By subscribing you authorise us to make those charges through Stripe until you cancel. If you want to change your payment method, write to us.

If you pay by card, the charge will appear on your bank statement as “CREACTIA”.

6.4 Invoice

For each charge we will email you an invoice with the billing details you gave us.

7. Extra reps, practice packs and Enterprise

If your team needs more, you will be able to extend your plan. Extensions are arranged by writing to [email protected] from the owner's or an administrator's email, or from the one used to pay. Before we activate them, we will confirm by email the amount including taxes, the date from which they apply and how they are paid. They form part of your subscription and are governed by these terms.

7.1 Extra reps

You will be able to add up to 3 reps to Starter, at €49 per month each; up to 5 to Team, at €45 per month each; and up to 10 to Scale, at €42 per month each. These prices are before VAT. Each extra rep adds one seat and 150 practice calls a month to your team's pool, and renews with the subscription until you cancel it.

7.2 Practice packs

You will be able to add a monthly pack of 250 practice calls for €59 a month, 600 for €139 or 1,500 for €329. These prices are before VAT. A pack renews every period until you cancel it, and cancelling a pack takes effect at the end of the current period. Unused practice calls from a pack will carry over to the next period (clause 12.5).

You will also be able to buy a one-off bundle of 250 practice calls for €69 before VAT. They will be valid in the period in which you buy them and in the next one.

7.3 Enterprise

For more than 30 reps we offer the Enterprise plan. With Enterprise, we will sign a separate annual contract with your company, with the seats, practice calls and price we agree. These terms will apply to Enterprise to the extent that contract says so.

8. Term, renewal and notices

The subscription renews automatically. At the end of each period, whether a month or a year, another period of the same length starts and we will charge you the price in force at that time. Extra reps and packs renew with it. It will continue like this until you cancel it, and you can cancel it at any time (clause 10).

On the annual plan we will email you at least 30 days before renewal, with the date and the amount we will charge you.

On the monthly plan we will charge you on the same day each month and email you the receipt.

9. Price changes

We may change the price of the team plans and their extensions. If we do, we will email you at least 30 days before your next renewal. The new price will apply from that renewal. If you do not agree, you may cancel beforehand and we will not charge you the new price.

If the VAT rate changes, the amount including taxes will change accordingly from the first affected charge.

10. How to cancel

You can cancel the subscription, an extra rep or a pack whenever you like. To do so, write to us at [email protected] from the account email of the person who subscribed or from the one used to pay. We will confirm the cancellation by email within two working days.

To stop the next charge, your message must reach us before the renewal date.

Cancellation will take effect at the end of the period you have already paid for. Until that day your team will be able to keep using the practice calls it has left, and after that there will be no further charges.

Deleting a rep's account in the app frees their seat, but does not change what you pay. To drop an extra rep, write to us.

When the app lets you cancel from the account, we will tell you and you will also be able to do it there.

Before the subscription ends, the owner and the admins will be able to export each rep's data from the app, and your company will be able to ask us for a copy of all its data. Section A.12 of the annex explains what happens to the data after cancellation.

11. Refunds

When you cancel, we will not refund what you have already paid, either for the rest of the period or for practice calls that have not been used. We will, however, refund you in these cases:

1. If we charged you by mistake, for example twice for the same period.
2. If Zidder is unavailable for reasons on our side for more than 3 consecutive days within the same period. We will refund the proportional part of that period.
3. If we cancel your subscription without you having breached these terms (clause 17.5). We will refund the unused part of what you have paid.
4. If we change the service, these terms or the sub-processors in a way that harms you and you cancel because of it (clauses 16 and 21, and section A.8 of the annex). We will refund the unused part of what you have paid.

Because you subscribe as a business, the consumer right of withdrawal does not apply.

If you see a charge you do not recognise, write to us and we will look into it.

We will refund the money using the same payment method you used, within 14 days at most from when we accept the refund.

12. Practice calls and searches: how they are counted and what happens when they run out

12.1 What counts as a practice call

Each call that someone on your team starts with the virtual customer counts as a practice call, from the moment the audio connects, even if they do not say anything. If they say nothing, there will be no report, because there is no conversation to assess.

A practice call is not deducted in these cases:

• If the call does not start because at that moment the service is busy with other practice calls, or because a usage limit for the whole service has been reached. The app will say so, and you can try again later.
• If the call is cut off because of a fault on our side or on the side of our artificial intelligence provider.
• If, when the call ends, the assessment fails because of a fault on our side or on our provider's side. A new assessment can be requested.

12.2 The team pool and the order in which it is used

All your team's practice calls come out of one shared pool. They are used in this order:

1. What is left over from the previous period: first pack practice calls, then one-off practice calls that are still valid.
2. The plan's practice calls, including those of extra reps.
3. The period's packs and, after them, one-off practice calls bought in it.
4. The buffer.

When your team has used 80 % of the period's paid practice calls, your managers will see a notice on their dashboard. When the buffer also runs out, nobody on the team will be able to start more practice calls until the next period or until you add a pack or one-off practice calls. The app will show when the next period starts.

A call that has already started always ends normally, even if the team runs out of practice calls halfway through it.

12.3 Researched companies

Company searches have daily limits: each person can research up to 10 companies a day, and the whole team up to 30. Every search that is actually made counts towards those limits, including those that give no result, those for companies later removed from the list and those that fail. After a search fails, that person will have to wait two minutes before starting another.

A search that cannot be made because a search limit for the whole service has been reached does not count. The app will say so, and you can try again later.

Your team's list can hold at most 200 companies at a time. If it reaches that number, one has to be removed to research another.

12.4 Daily practice limits

To protect the service and your team's accounts there are also daily practice limits:

• Each person can make at most 40 practice attempts per day. The 40 attempts also include calls that are not deducted from the pool, such as those cut off by a fault on our side. The only calls left out are those that never start because the service is busy or because the daily call limit for the whole service has been reached.
• On any one day, your team can use at most half of the practice calls it has in the period, counting the pool, the buffer, packs and one-off practice calls.

The day starts at 00:00 UTC, which in mainland Spain is 1 a.m. in winter and 2 a.m. in summer.

There are also technical limits on the use of artificial intelligence, designed to stop anyone who gets hold of someone else's account.

12.5 What is not used

The plan's practice calls and the buffer that are not used in a period do not carry over to the next one. Unused pack practice calls carry over to the next period only, and are used first. One-off practice calls are valid in the period in which they are bought and in the next one.

12.6 Changes to the number of practice calls and searches

We may increase the number of practice calls and searches, or the usage limits, whenever we like. If we reduce them, clause 21 applies.

13. Acceptable use

Your company will use Zidder so that its team can practise their own sales calls, and will make sure that the people it adds comply with this clause. In particular:

Personal data. The practice calls are simulated. Your team will speak as on a real call, but without giving anyone's personal or sensitive data, including their own: no real names, phone numbers, addresses, health data or data about your company's customers. The same applies to the comments written, the material uploaded and the names of the companies researched. Before uploading a document, any personal data that is not needed has to be removed. The virtual customer has a made-up name, and should be called by that name and not by the name of a real person.

What may be researched. Companies may be researched, not people. If the company belongs to a self-employed person, only their trade name and website are used.

The material. Your team will only upload material your company has the right to use. If it is confidential information belonging to another person or company, their permission is needed.

What is not allowed:

• Sharing an account or its password, or letting anyone other than its holder practise with it.
• Reselling Zidder or giving access to people who are not part of your sales team, whether employees or freelance collaborators.
• Accessing the app with automated programs, copying its content in bulk or getting around the usage limits.
• Trying to break the security of the service, accessing other people's accounts or reverse engineering the software, except as permitted by law.
• Using the virtual customer or the reports to create illegal, offensive, discriminatory or misleading content, or for anything other than practising.
• Using the scores or the reports to make employment decisions about people (clause 14).
• Breaching the ElevenLabs Prohibited Use Policy or Google's Generative AI Prohibited Use Policy. ElevenLabs and Google provide the artificial intelligence behind the practice calls.

If this clause is not complied with, clause 17 applies.

14. Reports are for training

Zidder is a training tool. The reports, scores, corrections and progress shown in the app are there to help each person prepare their next practice call and to help their managers support them.

Your company will not use them to make employment decisions about anyone: not to hire, dismiss, discipline or promote a person, not to set their pay or targets, and not to assess their performance at work. Nor will it use them to monitor its team. Using them for those purposes is a serious breach of these terms (clause 17.2).

Zidder scores observable behaviour in the conversation against a seven-section rubric that your team can consult. It does not infer emotions, personality, sincerity or mood, and it does not rank reps against each other.

Scores are calculated by an artificial intelligence and can contain errors (clause 15). Your managers can review, correct or challenge each report, and the app keeps a record of every change.

15. Artificial intelligence and its limits

Your team is talking to a machine. The virtual customer is an artificial intelligence, not a person. ElevenLabs provides the voice through its ElevenAgents platform and generates the virtual customer's replies with a Google Gemini model. Google Gemini models also prepare the report and each company profile. If ElevenLabs fails, we may switch to Google's Gemini voice until ElevenLabs is working again. Before each call, the app will say who provides the voice.

The score can contain errors. An artificial intelligence reads the transcript and calculates the score and the correction using fixed criteria, split into seven sections. It can be wrong: it may score too high or too low, misunderstand a sentence or suggest a correction that does not help. It is guidance for the next practice call, not a professional assessment of anyone's work.

The company profile can contain errors. It comes from the public information that Google's search engine finds at that moment. It may be incomplete, out of date or false. It should be checked before being used in a real call.

The virtual customer improvises. It may say inaccurate things about the company or its sector. It does not represent the real company or any real person.

The transcript is automatic and may contain errors.

Your team's voices. We use them only for the conversation. We do not record them or use them to identify anyone, and we have configured ElevenLabs, which voices the virtual customer, not to store them either.

Models may change. Artificial intelligence providers replace and retire models frequently. We may replace the models or the provider we use with others that do the same job. If the change involves a new sub-processor, section A.8 of the annex applies.

Sales. Zidder is for practising. How much your team sells depends on them and their customers.

16. Availability, maintenance and changes to the service

We will do everything reasonable to keep Zidder available at all times, but we do not guarantee a specific availability percentage.

Maintenance. From time to time we will stop the service to maintain or update it. Whenever we can we will do so at the quietest times, and if the downtime will last more than 2 hours, we will tell you beforehand. Downtime may cut off a practice call in progress, and that practice call will not be deducted.

Busy times. If, when someone starts a practice call, the service is busy, they will see a notice and can try again a few minutes later. That attempt will not be deducted.

Providers. Zidder depends on providers such as ElevenLabs, Google, Stripe, Cloudflare, Contabo and Microsoft. If any of them fails, the service may stop or slow down while they fix it.

Changes to the service. We may improve, change or withdraw features. If we are going to take away something described in clause 2, we will email you at least 30 days beforehand. You may cancel and we will refund the unused part of what you have paid.

17. Suspension and cancellation by us

17.1 Non-payment. If a charge fails, Stripe will try again and we will let you know. If after 14 days we still cannot collect it, we may suspend your team's access until it is paid. If a further 16 days go by without payment, we may cancel the subscription.

17.2 Serious breach. We may suspend access immediately if someone on your team puts the security of the service or of other customers at risk, if Zidder is used for something illegal, if other people's personal data is entered into it repeatedly or in serious cases, or if your company uses the reports for employment decisions (clause 14). We will tell you by email, explaining the reason.

17.3 Other breaches. If these terms are breached in any other way, we will tell you by email and you will have 7 days to put it right. If it is not put right, we may suspend access or cancel the subscription.

If we cancel because of a breach, we will not refund what you have paid.

17.4 Individual accounts. If the breach is by one person on your team, we may suspend only their account. We will tell you by email, and the rest of the team will be able to keep practising.

17.5 End of the service. We may stop offering the team plans or cancel your subscription without you having breached anything. In that case we will give you at least 30 days' notice and refund the unused part of what you have paid.

17.6 By order of an authority. We will suspend access if an authority or a court orders it.

18. Liability

We will provide the service with the diligence of a professional in the sector.

We are not liable for:

• Decisions made based on the score, the report, the correction or a company profile (clauses 14 and 15).
• Your team's sales results.
• Indirect damage, such as loss of profit or loss of customers, opportunities or reputation.
• Failures outside our control, such as those of your team's connection or devices, or of the network.
• The material and information that your team uploads.

Our liability to your company, on all counts combined, will not exceed what it has paid us for its plan and its extensions in the 12 months before the event that causes the damage.

These limits do not apply if we act with wilful misconduct or gross negligence, nor in cases where the law prohibits limiting liability.

Your company is responsible for the use of Zidder by the people it adds and for the material they upload. If a third party makes a claim against us for something done in breach of these terms, your company will be liable for the damage and costs this causes us.

19. Intellectual property, content and confidentiality

What is ours. Zidder's software, its design, its texts, its instructions to the artificial intelligence, the assessment criteria, the practice cases and the brand belong to us or to those who have licensed them to us. For as long as the subscription lasts, we grant you a non-exclusive and non-transferable licence for the people you add to use the app in accordance with these terms.

What belongs to your company. The material your team uploads, their comments and their transcripts remain your company's. You give us permission to use them only as necessary to provide the service and keep it secure. We do not use them to train artificial intelligence models or for any other purpose. The providers that supply the voice and prepare the report do not use them to train their models either.

The reports. Your company may freely use its team's reports and transcripts, within the limits of clause 14.

Confidentiality. We will treat your company's material as confidential. We will use it only for your team's practice calls, and no other customer will see it. To prepare each practice call, we send ElevenLabs and Google the parts of the material that your managers have approved.

Suggestions. If your company or your team sends us ideas or suggestions to improve Zidder, we may use them without owing anything for them.

20. Data protection

Your team's data. Your company is the controller of the data of the people it adds and of their practice calls, because it decides why and how its team is trained. Zidder is the processor and processes that data on your company's behalf, in accordance with the annex to these terms. Our privacy policy explains to your team how the app works in its section “Datos de la aplicación en los planes de equipo” (in Spanish).

Subscription data. Zidder is the controller of the subscription and payment data of your company and of the person who subscribes. We process it as explained in our privacy policy, in its section “Si contratas un plan de equipo” (in Spanish).

21. Changes to these terms

We may change these terms for any of these reasons: because the law changes or an authority requires it, because our providers' terms change, to improve security, or because we add or withdraw features of the service.

We will email you at least 30 days before the changes that affect you apply, with a summary of what is changing. If you do not agree, you may cancel before that date. If the change harms you and you cancel because of it, we will refund the unused part of what you have paid. If your team keeps using Zidder after that date, the new terms will apply.

Changes that only benefit you, or those that the law imposes with a shorter deadline, may apply earlier. Changes of sub-processors follow section A.8 of the annex.

Previous versions of these terms will remain published on zidder.com, each with its date, and we will link to them from this page.

22. Communications and support

We will write to the account email of the person who subscribed. If the contact person or their email changes, let us know. We may also notify you within the app.

Your company and your team can write to us at [email protected]. We will reply within two working days.

Communications by email are valid for all purposes of this contract.

23. Assignment of the contract

We may assign this contract to another person or company that continues to offer Zidder, for example a company set up by the provider. We will email you beforehand, and you will keep at least the same terms. If you do not agree, you may cancel and we will refund the unused part of what you have paid.

Your company may assign its subscription to another company only with our written permission.

24. Other provisions

If a clause is not valid, the rest of the terms remain in force, and that clause is replaced by another that complies with the law and comes as close as possible to its purpose.

If we do not enforce something set out in these terms, it does not mean that we waive the right to enforce it later.

Force majeure. Neither party is liable for failures caused by events it cannot control or reasonably foresee, such as disasters, general internet or power outages, serious cyber-attacks or general outages of providers.

The annex prevails on data protection. If the annex and the rest of these terms say different things about the processing of your team's data, the annex applies.

25. Governing law and courts

These terms are governed by Spanish law.

For any dispute, both parties submit to the courts of the place where Zidder's address, given in clause 1, is located.

Before going to court, write to us at [email protected] and we will look for a solution.

Annex. Data processing agreement

This annex is the data processing agreement required by Article 28 of the General Data Protection Regulation (GDPR). It forms part of these terms and your company accepts it with them by ticking the box on the payment page.

A.1 Parties, subject matter and duration

Your company is the controller and Zidder, the provider named in clause 1, is the processor. Zidder will process your team's personal data only to provide your company with the service described in these terms. The agreement lasts as long as the subscription and, after that, until Zidder has returned or deleted the data (section A.12).

A.2 Nature and purpose

The purpose is training your company's sales team: practice sales calls with a virtual customer, their transcript, a training report against a rubric and progress tracking by managers. Monitoring people and any employment decision about them are excluded (clause 14).

To do this, Zidder collects, records, stores and consults the data, transcribes the practice calls and assesses them with artificial intelligence, discloses the data to the sub-processors in section A.8 and, at the end, deletes it. Voices are processed live and are not recorded.

A.3 People and data

People. The people your company has in the app: the owner, admins, coaches and reps. Occasionally, also people whose data appears in the material your team uploads or in the profile of a researched company, for example a self-employed person whose trade name appears in a profile.

Data.

• Name, work email and role on the team.
• The password, stored as a scrypt hash, so nobody can recover it.
• The voice in each practice call, while the person speaks. Neither Zidder nor ElevenLabs stores it.
• The transcript of each practice call and its report: the score, the sections, the summary, the correction and progress.
• Usage data: sign-ins, practice calls made, their duration and cost, and the steps of the training cycle.
• The sales material your team uploads, your company profile and the profiles of researched companies.

The service does not need special categories of data, such as health data. Your company will ask its team not to enter them (clause 13).

A.4 How long it is kept

• Transcripts and detailed reports are kept for the period your company chooses in the app: 0, 7, 30 or 90 days, or one year. When the period ends, they are deleted within an hour.
• The date, duration, cost, overall score and outcome of each practice call are kept for as long as the person has an account.
• ElevenLabs keeps the transcript of each practice call, with the virtual customer's instructions, until we have the report. We then delete it. If that deletion fails, ElevenLabs deletes it automatically after 24 hours.
• Google keeps, for up to 55 days, a technical copy of what it receives to prepare the report, only to detect and prevent abuse. It keeps what it receives for company research for 30 days.
• What is deleted from the app disappears from the backups within 15 days at most.

Our privacy policy gives the details in its section “Cuánto tiempo guardamos los datos de la aplicación en los planes de equipo” (in Spanish).

A.5 Your company's instructions

Zidder will process the data following your company's documented instructions. Those instructions are these terms, this annex and what your company sets up in the app, such as the people added, the retention period or the approved material. Your company may give us other instructions in writing, to the email in clause 22. If we believe an instruction breaches the GDPR or other data protection law, we will tell you straight away.

Zidder will not use the data for its own purposes or to train artificial intelligence models. It will disclose it only to the sub-processors in section A.8, or to an authority when the law requires it. In that case we will tell you beforehand, if the law allows.

A.6 Confidentiality

The people who process the data on Zidder's behalf have committed to confidentiality or are under a legal duty of confidentiality. They access the data only when needed to provide the service, solve an incident or keep it secure.

A.7 Security

Zidder applies the measures of Article 32 GDPR. In particular:

• All communication is encrypted (HTTPS).
• The app keeps each customer's data separate and gives each person only the permissions of their role.
• Passwords are stored as scrypt hashes, and the app protects its forms against forged requests and limits sign-in attempts.
• The server is in the European Union and administrative access to it is restricted.
• Every night we make an encrypted backup of the database, which only we can open and which we keep on the same server. We keep the last 14 days of backups.
• Expired data is deleted automatically, and the app logs administrative actions.

A.8 Sub-processors

Your company authorises Zidder to work with these sub-processors. Zidder requires them by contract to meet data protection obligations equivalent to those in this annex, and is liable to your company for their compliance.

ElevenLabs does not use your team's voices or conversations to train or improve its models, and neither does Google, which works for ElevenLabs and for us. ElevenLabs works with its own sub-processors, which it lists at compliance.elevenlabs.io.

New sub-processors. Before adding or replacing a sub-processor, we will email you at least 30 days in advance. Within that period, your company may object on reasonable data protection grounds. If we cannot reach an agreement, it may cancel the subscription and we will refund the unused part of what it has paid.

A.9 Transfers outside the European Union

Some sub-processors process data outside the European Economic Area (section A.8). Those transfers are protected by the European Commission's standard contractual clauses and, where the US company receiving the data has signed up to the EU-US Data Privacy Framework, by that framework as well. Zidder will make other transfers only on your company's instructions or when the law requires it. Your company can ask us for a copy of those safeguards.

A.10 People's rights

Your company handles its team's requests for access, rectification, erasure, objection, restriction and portability. From the app, the owner and the admins can export each rep's data in a structured format and delete a rep with their full history. If a request concerns the owner, a coach or an admin, your company will ask us to export or delete that account, and Zidder will do so within 10 working days of being asked. Within the same period, Zidder will help your company with anything else it needs to handle a request.

If someone on your team writes to us, we will pass the request on to your company as soon as we receive it and will not answer it ourselves, except to tell them we have passed it on.

A.11 Security breaches and impact assessments

If Zidder becomes aware of a security breach affecting your company's data, it will notify you without undue delay and in any event within 48 hours of becoming aware of it, with whatever information required by Article 33(3) GDPR it has at the time. That way your company can notify the authority within the 72-hour deadline if it has to. If we do not yet have all the information, we will provide it as we obtain it.

Zidder will also help your company, with the information it has, to meet the requirements of Articles 32 to 36 GDPR: security, impact assessments and prior consultation with the authority when needed.

A.12 End of the processing

When the subscription ends, your company may ask us to return its data in a structured format. It can ask for this before the end date or within the following 30 days. After those 30 days, we will delete all your company's data from the app, and it will disappear from the backups within 15 days at most. If your company asks, we will confirm the deletion in writing. We will keep only what the law requires us to keep, blocked, for the period the law sets.

A.13 Information and audits

Zidder will make available to your company the information needed to show that it complies with this annex. Your company may audit our compliance once a year, with 15 days' notice, directly or through an auditor bound by confidentiality. It may also do so when an authority requires it or after a security breach. The audit will not give access to other customers' data, and each party will bear its own costs.

A.14 Your company's responsibilities

As controller, your company:

• Decides what it uses Zidder for with its team and has a legal basis for doing so.
• Informs each person before adding them: what it will use Zidder for, what data is processed, who sees it, how long it is kept and how to exercise their rights. It can use Zidder's privacy policy to explain this.
• Carries out the impact assessment when required.
• Respects its employees' digital rights and meets its obligations towards employee representatives.
• Uses the reports only for training (clause 14) and asks its team not to enter third parties' data (clause 13).