Data Processing Agreement
WebVoltCRM

Data Processing Agreement

Last updated: March 2026

1. Introduction

This Data Processing Agreement ("DPA") governs how WebVoltCRM LLC ("Processor") processes personal data on behalf of business users ("Controller") in connection with the WebVoltCRM platform. This DPA forms part of our Terms of Service.

2. Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person, including names, emails, phone numbers, and IP addresses.
  • Processing: Any operation performed on personal data, including collection, storage, use, and deletion.
  • Controller: The business user who determines the purpose and means of processing personal data (you).
  • Processor: WebVoltCRM LLC, which processes data on the Controller's behalf.

3. Data We Process

As a Processor, we handle the following data on your behalf:

  • Customer lead information (names, emails, phone numbers, service requests)
  • Business contact and profile information
  • Communication logs and message histories
  • Referral and marketing campaign data

4. Our Obligations

WebVoltCRM commits to:

  • Process data only on documented instructions from the Controller
  • Maintain confidentiality of all personal data
  • Implement appropriate technical and organizational security measures
  • Assist the Controller in fulfilling data subject rights (access, correction, deletion)
  • Notify the Controller without undue delay in the event of a data breach
  • Delete or return all personal data upon termination of the agreement

5. Your Obligations as Controller

As the Controller, you are responsible for:

  • Ensuring you have a lawful basis to collect and share data with us
  • Providing required disclosures to your customers about data collection
  • Obtaining any necessary consents before sending marketing communications
  • Ensuring data accuracy and responding to deletion requests from your customers

6. Sub-Processors

We may engage sub-processors to help provide the platform (e.g., cloud hosting, email delivery, AI services). We will maintain a list of sub-processors and notify you of changes. All sub-processors are bound by data protection obligations no less protective than this DPA.

7. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including encrypted data transmission, access controls, regular security assessments, and secure data storage.

8. Data Retention & Deletion

We retain personal data as long as your account is active or as needed to provide services. Upon termination, we will delete your data per our Data Deletion Policy within 90 days unless retention is required by law.

9. Contact

For DPA inquiries or to exercise data rights, contact us at info@webvoltcrm.com.