PeopleLinx published a revised Data Processing Agreement, effective 12 October 2026, alongside an updated privacy policy. It commits not to use customer personal data to train general purpose AI models, or let a provider do so, without express written authorization, and requires 30 days written notice before adding or replacing a subprocessor, with a right to object and to terminate with a prorated refund. An exhibit names the downstream providers of the outreach platform PeopleLinx runs on, including Microsoft Azure, Google, Cloudflare, Twilio, Verifalia, OpenAI and Unipile, and states these are not a list of PeopleLinx's own subprocessors, which are identified per engagement in the order form or on request.
Buyers get a written no training commitment and notice and objection rights on subprocessors. The named providers belong to the underlying outreach platform, so buyers should ask for their own engagement's subprocessor list.