Data Processing Addendum

Roles and scope

Where a customer enters customer, contact, contract or business data into a workspace, the customer generally acts as controller and Contract Uplift, operated by Anna Vincze, acts as processor on the customer’s documented instructions. Contract Uplift acts separately in its own role for account, authentication, billing, security, support and service operation data. The operator's address is 3412 Bogács, Wass Albert u. 2., Hungary.

Purpose and data

Processing supports the operation of Contract Uplift: storing, displaying, calculating, tracking, auditing and supporting contractual uplift workflows. It may involve business contacts, customer-entered contract and workflow data, workspace-member data and, where requested, information in a spreadsheet or system export submitted for assisted data onboarding. Processing continues for the duration of the customer’s use of the service and the applicable recovery/deletion period.

Processor commitments

Contract Uplift will:

• process personal data only on documented instructions, unless law requires otherwise;
• limit access to authorised personnel and keep them subject to confidentiality;
• use appropriate technical and organisational safeguards for the service;
• provide reasonable assistance with data-subject requests and security incidents;
• delete or return data at the end of service subject to documented retention; and
• make available information reasonably needed to demonstrate these commitments.

Subprocessors and transfers

Relevant providers may include Cloudflare for infrastructure, Google Firebase for authentication, Resend for transactional email, a payment or Merchant-of-Record provider identified at checkout, and Cloudflare Email Routing with Google/Gmail mailbox infrastructure used to receive assisted-onboarding messages. Where an international transfer is relevant, the parties will apply the safeguards required by applicable law.

Assisted onboarding

Assisted onboarding is a manual service. The customer remains responsible for ensuring it is authorised to provide submitted data.

Contact

For data-processing questions, contact privacy@contractuplift.com.