Data Processing Agreement

Last updated June 2026.

This Data Processing Agreement (DPA) describes how Cadrey handles personal data on your behalf when you use the service. It forms part of our Terms. If you need a countersigned copy for your records, email support@cadrey.ai and we'll provide one.

Roles

You are the controller of the personal data you and your customers put into Cadrey (contacts, conversations, bookings, and similar). Cadrey is the processor: we process that data only to provide the service, and only on your documented instructions, which include your use of the product's features.

Scope and purpose

We process personal data to run the features you turn on: capturing and organizing your contacts, answering and following up with your leads in your voice, scheduling, and reporting. We do not sell your data or your customers' data, and we do not use it to advertise to your customers.

Sub-processors

We use a small set of trusted infrastructure and communications providers to deliver the service (for example, cloud hosting, our database, email and telephony delivery, and AI model providers). Each is bound by confidentiality and data-protection terms consistent with this DPA. We'll tell you about material changes to our sub-processors and give you a chance to object. A current list is available on request.

Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, tenant isolation so each workspace's data stays separate, access controls and least-privilege, and audit logging of sensitive actions.

Your customers' rights

If one of your customers asks to access, correct, or delete their data, the product gives you the tools to do it, and we'll assist where you can't do it yourself. We process personal data only as long as needed to provide the service or as you direct.

Breach notification

If we become aware of a personal-data breach affecting your data, we'll notify you without undue delay and share what we know so you can meet your own obligations.

International transfers

Where data is transferred across borders, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) with our providers.

Return and deletion

You can export your data at any time. When your account closes, we delete or return your personal data within a reasonable period, except where we're required to keep it by law.

Contact

Questions about data processing, or to request a signed DPA or our sub-processor list, email support@cadrey.ai.

This is a plain-language summary for the marketing site and is not a substitute for the full executed agreement.