Data Processing Addendum
Last updated 12 October 2026
Some details on this page are being finalised.
When your team syncs prospect and deal data into OutboundManager, you are the controller of that data and we are your processor. Our DPA forms part of the Terms of service. This page summarises it; a copy to sign is available on request.
What we commit to
- Instructions. We process customer data only to provide the service and on your documented instructions, which are the terms and how your users configure and use the product.
- Confidentiality. Anyone who processes customer data for us is bound to keep it confidential.
- Security. We maintain the technical and organisational measures described on our Security page, including encryption of keys, TLS, workspace isolation and role-based access.
- Sub-processors. We use the sub-processors listed on the Sub-processors page, each under its own data processing terms, tell you before adding or replacing one, and let you object.
- Rights requests. We help you answer requests from the people whose data you hold (access, correction, deletion and so on), and pass on any request we receive directly.
- Breach notification. We tell you without undue delay after becoming aware of a personal data breach affecting your data, with the information you need to meet your own obligations.
- Deletion. When the service ends, or when you delete your workspace, we delete customer data, except where the law requires us to keep it. Data in backups is removed when the backup window passes.
- Assistance and audits. We give you the information reasonably needed to show compliance, including answers to security questionnaires.
- International transfers. Data is stored in the United States and may be accessed from India. Where the law requires a transfer safeguard, the European Commission’s Standard Contractual Clauses (and the UK Addendum) are available on request as part of the signed DPA.
Processing details
- Subject matter and purpose: outbound sales reporting, reply handling, enrichment administration and the related AI features.
- Data subjects: your users, and the prospects, contacts and colleagues whose data your connected tools hold.
- Categories of data: names, work email addresses, LinkedIn URLs, companies, job titles, phone numbers where provided, campaign and activity records, reply excerpts and deal records. See the Privacy policy.
- Duration: for as long as you use the service, then until deletion as described above.
Request a signed DPA
Email hello@outboundmanager.app with your company’s legal name and address and the name of the person who will sign. If you need your own DPA template reviewed, send it too.