Data Processing Addendum
Terms under which SquadSpace processes personal data on behalf of business customers.
In plain terms
If you use SquadSpace to process other people’s personal data (e.g. your team’s or clients’), this DPA sets the controller–processor terms: we process only on your instructions, keep it confidential and secure, use vetted subprocessors, help with data-subject requests and breaches, and delete data on termination.
01Scope & roles
This DPA supplements the Terms of Service and applies where SquadSpace processes personal data on your behalf. You are the controller; SquadSpace is the processor. It takes effect when incorporated into your agreement or accepted by an authorized representative.
02Processing instructions
We process personal data only to provide the Service and on your documented instructions, including as set out in the Terms and your configuration, unless required otherwise by law.
03Confidentiality
Personnel authorized to process personal data are bound by confidentiality obligations.
04Security
We maintain the technical and organizational measures described on our Security page, appropriate to the risk.
05Subprocessors
You authorize the subprocessors listed on our Subprocessors page. We impose data-protection terms on each and remain responsible for their performance. We give notice of new subprocessors so you may object on reasonable grounds.
06Data-subject requests
Taking into account the nature of processing, we assist you in responding to requests from data subjects to exercise their rights.
07Personal-data breaches
We notify you without undue delay after becoming aware of a personal-data breach affecting your data, with information to help you meet your obligations.
08Deletion & return
On termination, we delete or return personal data as you elect, subject to backup rotation and legal retention duties.
09Audits
We make available information reasonably necessary to demonstrate compliance and, on reasonable notice and confidentiality terms, support audits.
10International transfers
Where personal data is transferred across borders, we rely on recognized safeguards such as Standard Contractual Clauses.
11How to execute
To put a countersigned DPA in place, contact legal@www.squadspace.co. A downloadable version will be linked here.
§Contact
Questions about this document? Reach Ajay Shenoy at legal@www.squadspace.co. Postal: Tokyo, Japan.