Data Processing Agreement (DPA)
Last updated: 2 August 2026
This DPA applies when FreshSignal processes personal data on the customer’s behalf.
Parties and scope
The customer is controller and MEZTECH LLC/FreshSignal is processor. Processing is limited to hosting CRM records, managing target lists, executing delivery instructions through a connected mailbox, recording delivery events, and providing support.
Instructions and purpose
FreshSignal processes data only under the agreement, documented customer instructions, security needs, and applicable law, and does not add customer campaign data to its own advertising list.
Data and data subjects
Business contact details, name, role, company, email, phone, campaign engagement, objection/opt-out records, and account-user data may be processed for prospects, staff, customers, and business contacts.
Confidentiality and security
Access is restricted by authorization; encryption in transit, logging, backup, and incident management are applied. Absolute security is not guaranteed.
Subprocessors and transfers
Cloud, database, identity, mailbox-connectivity, and observability providers may act as subprocessors. FreshSignal applies appropriate contractual safeguards and provides current subprocessor information on request.
Data-subject requests
FreshSignal provides reasonable technical assistance with access, correction, deletion, objection, and portability requests. The customer manages identity verification and the legal response.
Incident notice
After becoming aware of a confirmed security incident affecting customer data, FreshSignal will notify the customer without undue delay with available information and assist mitigation.
Retention and deletion
On termination, customer data may be exported or deleted subject to legal retention, backups, security, and dispute needs. Minimal suppression records may be retained to prevent renewed contact.
Audit
The customer first requests reasonable security documentation. If insufficient, one proportionate audit per year may be conducted subject to confidentiality and operational security.