Data Processing Agreement

1. Roles of the parties

For personal data contained in leads and workspace content ("Customer Personal Data"), the Customer is the controller and LeadZapp (Zamorins Tech) is the processor, processing only on the Customer's documented instructions.

2. Scope & processing details

• Subject matter: provision of the LeadZapp lead-research service.
• Duration: the term of the subscription plus any retention period.
• Nature & purpose: discovery, enrichment, verification, research, scoring, storage and delivery of business leads.
• Categories of data: business-contact details of prospects; account data of Customer users.
• Data subjects: Customer's prospects and personnel.

3. Subprocessors

The Customer authorizes LeadZapp to engage the subprocessors listed on our Subprocessors page. We impose data-protection obligations on each and will give notice of material changes.

4. Security measures

We maintain technical and organizational measures appropriate to the risk, including encryption in transit and at rest, tenant isolation, access controls with MFA, logging, and monitoring. See Security & Compliance.

5. Data-subject requests

We will assist the Customer, taking into account the nature of processing, to respond to requests to exercise data-subject rights, and provide tools to access, export, or delete data.

6. Personal-data breach notification

We will notify the Customer without undue delay after becoming aware of a personal-data breach affecting Customer Personal Data, with information reasonably available to us.

7. Return & deletion

On termination, we will delete or return Customer Personal Data as instructed, subject to legal retention requirements.

8. International transfers

Where we transfer Customer Personal Data across borders, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.