Data processing addendum

1. What the DPA covers

Our data processing addendum (DPA) applies when Outember processes personal data on your behalf, for example the leads you import and the messages you exchange with them, and that processing is covered by the GDPR, the UK GDPR or a similar law. It forms part of our Terms of service. This page summarizes it.

2. Roles

• You are the controller of lead data, conversations and campaign content. You decide whom to contact and why, and you need a lawful basis for it.
• Pixelpk, which operates Outember, is your processor for that data.
• Pixelpk is the controller of your own account, billing and usage data, as described in our Privacy policy.

3. Our commitments as processor

• Instructions: we process personal data only to provide the service as you configure it (your campaigns, imports, settings and integrations), and as the law requires.
• Confidentiality: people who can access the data are bound to keep it confidential. Staff support access is limited, short-lived and recorded in an audit log.
• Security: the measures described on our security page, including encryption in transit, encrypted secrets, hashed credentials and access checked by workspace and role.
• Sub-processors: you authorize the providers on our sub-processors page. We give them data protection terms at least as protective as ours, and we announce changes on that page before they take effect.
• International transfers: where the law requires it, transfers use safeguards such as the European Commission's standard contractual clauses.
• Your data subjects: we help you answer requests to access, correct, delete or export data, mostly through the app's own tools (do-not-contact list, exports) and otherwise on request.
• Breaches: we tell you without undue delay after becoming aware of a personal data breach affecting your data, with the information you need to meet your own obligations.
• End of service: on request we delete your organization's personal data within 30 days (backups within 90 days), unless the law requires us to keep it.
• Information and audits: we give you the information reasonably needed to show we meet these commitments.

4. Request the signed DPA

Email hello@outember.io with your company's legal name, address and the name of the person who signs. We'll send the DPA, including the standard contractual clauses where they're needed, ready to sign.

5. Contact

Pixelpk, the operator of Outember

• Address: 79 Block G2, Johar Town, Lahore 54000, Punjab, Pakistan
• Email: hello@outember.io
• Phone: +92 302 7215087