← Back home

Data Processing Addendum (DPA)

Last updated: 2026-09-06

This DPA forms part of the agreement between Lavisho TT ("Processor") and the customer ("Controller") for the Lavisho TT service.

1. Subject matter

Processor processes Customer Personal Data on behalf of the Controller solely to provide the Service.

2. Duration

For the term of the Controller's subscription plus 30 days for export.

3. Categories of data

Business contacts (name, email, phone, company), sales activity, geolocation from GPS check-ins, and any other content the Controller uploads.

4. Subprocessors

• Cloud hosting provider (application runtime and database)
• Transactional email provider
• AI providers (for optional features like drafting and summarization)
• Payment provider (for billing only)

Current subprocessor list is available on request. Controller will be notified of material changes.

5. Security

Encryption in transit (TLS) and at rest, row-level tenant isolation, least-privilege service roles, audit logs, regular backups.

6. Data subject requests

Processor will assist Controller in responding to data-subject rights requests within reasonable timeframes.

7. Deletion

On termination, Processor deletes Customer Data within 30 days unless retention is required by law.

8. International transfers

Where personal data is transferred across borders, appropriate safeguards (SCCs or equivalent) apply.

9. Contact

DPA execution requests: support@lavishott.cloud.

This is a template. Have your counsel review before relying on it.