Data Processing Addendum

This DPA reflects the parties' agreement with respect to the processing of personal data under applicable data-protection laws, including where relevant the EU and UK GDPR, PIPEDA, and comparable U.S. state privacy laws.

Note. This DPA is a template. A countersigned copy is available on request from customers on paid plans by contacting info@salesops.ca.

Capitalized terms not defined here have the meaning given in the parties' underlying agreement or in applicable data-protection law.

The customer is the Controller for personal data submitted to the platform. SalesOps acts as Processor and processes personal data only on the customer's documented instructions, which include the underlying agreement, the SalesOps Privacy Policy, and the customer's use of the platform's features.

Subject matter. Provision of the SalesOps CRM and outside-sales productivity platform.
Nature and purpose. Hosting, processing, and making accessible customer content to authorized workspace members; providing AI-assisted features when invoked.
Data subjects. Users, workspace contacts, and business relationships recorded by the customer.
Duration. The term of the underlying agreement plus any additional retention window described in the SalesOps Privacy Policy.

SalesOps implements and maintains the technical and organizational measures described in the SalesOps Security page, as updated from time to time. Customers acknowledge that specific measures may evolve as the platform evolves, provided that overall protection is not materially reduced.

SalesOps limits access to personal data to personnel with a need to know. Personnel are bound by written or statutory obligations of confidentiality.

The customer authorizes SalesOps to engage the subprocessors listed at /legal/subprocessors. SalesOps will maintain that list and, where legally required, provide reasonable prior notice of material changes.

The primary SalesOps database region is Germany. Where personal data is transferred outside the EEA, UK, or another jurisdiction with equivalent protections, the parties agree to rely on lawful transfer mechanisms including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

SalesOps will provide the customer with reasonable assistance to respond to data-subject requests through the features available in the SalesOps platform and, where required, by ad hoc support.

SalesOps will notify the customer of a confirmed Personal Data Breach affecting the customer's workspace without unreasonable delay, and will provide reasonable information and cooperation to help the customer meet its own notification obligations.

SalesOps will respond to reasonable, proportionate written information requests to demonstrate compliance with this DPA. On-site audits are made available only under a signed enterprise agreement and subject to reasonable confidentiality, scope, and timing conditions.

On termination of the agreement, and subject to any retention window described in the SalesOps Privacy Policy, SalesOps will delete or return personal data in accordance with the customer's instructions and its own routine deletion procedures.

Each party's liability under this DPA is subject to the limitations and exclusions set out in the underlying agreement.

To countersign this DPA, contact info@salesops.ca from a workspace-administrator email address, including your legal entity name and the workspace(s) covered.