Data Processing Addendum (DPA) – Summary

Last updated: 27 Sep 2025

This summary highlights key terms of the HootData Data Processing Addendum (DPA). Request the full, signable DPA by emailing [email protected].

We process limited personal data as:

• Processor for account/support logs and customer-provided data.
• Independent Controller for security logs, billing records, and aggregated analytics.

Sub-processors. Hosting, analytics, and payments providers are used; a current list is available on request.

Security. Encryption in transit/at rest; access controls; logging; incident response.

Transfers. Where data is transferred internationally, we use SCCs or equivalent safeguards.

Deletion/Return. On termination or request, we delete or return personal data within 30 days, unless retention is legally required.

Contact. Request the full, signable DPA at [email protected].