When you use Amy, Deriv may process the following categories of personal data:

1. Message content: the full text of your messages to Amy and Amy’s responses; any images or attachments you send.
2. Identity and contact data: your name, email address, and a unique conversation identifier assigned by our customer service platform.
3. Deriv account identifiers: your Deriv user ID, trading account login IDs, country of residence, and account brand/region.
4. Account and compliance data: account status and any restrictions, wallet balance, KYC/identity verification status, and payment and transaction history.
5. Verification data: email verification status. In case you verify by phone, your phone number is used temporarily for verification purposes.
6. Conversation metadata: timestamps, channel, language, conversation status, tags, and priority flags.
7. Any additional information you voluntarily provide in the course of your query.

If you do not have a Deriv account, Amy can only access items 1, 2, 6, and 7 above.

Please do not share sensitive personal information, such as health information, financial distress, or special category data within the meaning of Article 9 GDPR, through Amy. Amy is not designed to handle such information, and Deriv will process it only to the extent necessary to respond to your query.

Deriv processes your personal data collected through Amy for the following purposes and on the following legal bases under Article 6 GDPR:

1. If you have a Deriv account, we use your personal data to help with questions about your account and our products and services. We do this to support you as our customer, and we rely on Article 6(1)(b) GDPR to process your personal data.
2. If you do not have a Deriv account, we use your personal data to answer general questions about our products and services. We do this so we can respond to your queries, and we rely on Article 6(1)(f) GDPR to process your personal data.
3. We may also record and review your chats with Amy to check service quality, train staff, monitor our compliance with laws and regulations, and improve our services. We do this to remain compliant, maintain good service, and improve Amy over time, and we rely on Article 6(1)(f) GDPR to process your personal data.

Automated processing: Amy is a fully automated system. However, no solely automated decision-making producing legal or similarly significant effects takes place through Amy. Amy’s responses are informational only.

‍