This Data Processing Addendum ("DPA") forms part of the Terms of Service between Tradellen LLC ("Processor") and the business that subscribes to the Tradellen platform ("Controller", "you"). It applies whenever Tradellen LLC processes personal data on your behalf. No signature is required — it takes effect with the Terms. If your counsel requires a countersigned copy, contact us.
You are the Controller of the personal data you and your team put into the platform — your customers, their contact details, service history, call recordings, and your technicians' records. You determine why and how that data is processed.
Tradellen LLC is the Processor of that data and processes it only on your documented instructions, which consist of these Terms, this DPA, and your use of the product's features.
Separately, Tradellen LLC is an independent Controller of the data it needs to run its own business: your account and login details, billing records, support correspondence, security logs, and website analytics. That processing is described in the Privacy Policy, not here.
| Subject matter | Provision of field service management software: call answering and summarization, scheduling, dispatch, estimates, invoices, payments, messaging, and technician coordination. |
|---|---|
| Duration | For as long as your account is active, plus the retention periods described in §7. |
| Nature and purpose | Storage, structuring, retrieval, transmission to your customers and your team, AI summarization and drafting, and deletion. |
| Categories of data subject | Your customers and prospective customers; your employees, technicians, and dispatchers; callers to your business number. |
| Categories of personal data | Name, phone number, email address, service address, job and service history, appointment times, invoice and payment status, call recordings and AI-generated call summaries, technician assignment, and — where a technician opts in — technician location coordinates and shift status. |
| Special categories | None are requested or required. The Service is not designed for protected health information or payment card numbers, and the Acceptable Use Policy prohibits submitting them. |
You give general written authorization for Tradellen LLC to engage subprocessors. The current list, with the purpose of each, is published at tradellen.com/subprocessors. Each subprocessor is engaged under a written contract imposing data protection obligations no less protective than this DPA, and Tradellen LLC remains liable to you for their performance.
We will update the Subprocessors page before a new subprocessor begins processing your data. If you object to a new subprocessor on reasonable data protection grounds, tell us within 30 days of the change; if we cannot offer a reasonable alternative, you may terminate the affected part of the Service and receive a pro-rata refund of prepaid fees.
Because you are the Controller of your customers' records, requests from those individuals should be directed to you. The platform is built so you can answer them yourself: your account can export every record it holds, and can correct or delete individual records, without asking us. Where a request requires action only we can take, contact us and we will assist without undue delay.
Measures currently in place, all of which are implemented in the running system rather than planned:
We do not currently hold SOC 2, ISO 27001, or equivalent third-party certification, and we do not claim otherwise.
We will notify you without undue delay after becoming aware of a personal data breach affecting your data, with the information we have at the time — what happened, what data is involved, what we are doing, and what we recommend you do. We will not delay an initial notification in order to make it complete.
The Service is hosted in the United States, and the subprocessors listed on the Subprocessors page process data in the United States and, for some vendors, in other regions they operate in. Where a transfer of personal data out of the EEA, UK, or Switzerland requires a transfer mechanism, the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914, Module Two: controller to processor), together with the UK International Data Transfer Addendum where applicable, are incorporated into this DPA by reference and apply to that transfer. You are the data exporter; Tradellen LLC is the data importer.
On reasonable written request, and no more than once in any twelve-month period unless required by a supervisory authority, we will provide the information reasonably necessary to demonstrate compliance with this DPA. Because we do not yet hold a third-party audit report, this takes the form of written responses and evidence rather than a certification.
If this DPA conflicts with the Terms of Service on the processing of personal data, this DPA controls. If the Standard Contractual Clauses conflict with this DPA, the Clauses control.
Data protection enquiries to Tradellen LLC: [email protected].