Data Processing Addendum

Last updated: August 13, 2026

This Data Processing Addendum ("DPA") forms part of the Terms of Service between you ("Customer", the data controller) and SalesFury ("Processor") and applies to the processing of personal data on your behalf.

1. Roles of the Parties

For personal data you upload or process through the Service (such as your contacts and leads), you are the data controller and SalesFury acts as the data processor. You determine the purposes and means of processing; we process such data only on your documented instructions.

2. Scope & Purpose of Processing

• Subject matter: provision of the SalesFury CRM Service.
• Duration: for the term of your subscription plus any legally required retention.
• Nature & purpose: hosting, storing, and transmitting data to operate CRM, dialer, email, and SMS features.
• Types of data: contact names, phone numbers, email addresses, notes, deal information, and communication records.
• Categories of subjects: your contacts, leads, customers, and prospects.

3. Processor Obligations

We will:

• Process personal data only on your documented instructions.
• Ensure persons authorized to process data are bound by confidentiality.
• Implement appropriate technical and organizational security measures.
• Assist you, where reasonable, in responding to data subject requests.
• Assist with security, breach notification, and impact assessments as applicable.
• Delete or return personal data at the end of the engagement, subject to legal retention.

4. Sub-processors

You authorize us to engage sub-processors (such as cloud hosting providers and Twilio for messaging and voice) to deliver the Service. We remain responsible for their compliance with obligations equivalent to those in this DPA. We will provide notice of material changes to our sub-processors upon request.

5. Security Measures

We maintain safeguards including encryption in transit, access controls, authentication, network protection, and monitoring. We regularly review and update these measures.

6. Data Breach Notification

In the event of a personal data breach affecting your data, we will notify you without undue delay after becoming aware and provide reasonable information to help you meet your notification obligations.

7. Data Subject Requests

Where a data subject contacts us directly regarding data you control, we will refer them to you. We will provide reasonable assistance to help you respond to access, correction, deletion, and portability requests.

8. International Transfers

Where personal data is transferred across borders, we implement appropriate safeguards consistent with applicable data protection law.

9. Return & Deletion of Data

Upon termination, and at your request, we will delete or return personal data, except where retention is required by law. Residual copies in backups are deleted in the ordinary course.

10. Contact

For DPA-related inquiries, contact privacy@salesfury.us.