Asset 59
Login
Get a Demo
Get Started

Data Processing Agreement

Last Updated: August 30, 2026

This Data Processing Addendum (“DPA”) is part of the Lead Stats Terms of Service and applies when Leadstats IO LLC (“Lead Stats,” “we”) processes personal data on behalf of a customer (“Customer,” “you”) in the Lead Stats services.

If there is a conflict, this DPA controls for that processing.

1. Roles

  • Customer is the controller (or “business”) of Customer Data (leads, contacts, and other data you upload or sync).
  • Lead Stats is the processor (or “service provider”) of that Customer Data.
  • Lead Stats is the controller of its own account, billing, and website data, as described in the Privacy Policy.

2. What we process

We process Customer Data only to provide, secure, and support the Services: hosting, dashboards, imports, communications you initiate, backups, and troubleshooting.

We do not sell Customer Data. We do not use it for our own marketing of third-party products.

3. Instructions

We process Customer Data only on your documented instructions (the Terms, this DPA, and your use of the product). We will tell you if we believe an instruction violates applicable law.

4. Security

We use administrative, technical, and physical safeguards appropriate to the risk, including access control, encryption in transit, logging, and vendor controls. Details of product security practices are maintained internally for our SOC 2 program.

5. Subprocessors

We use subprocessors to run the Services, including:

  • Cloudflare — CDN, DNS, TLS, bot protection
  • Wasabi — object storage / backups
  • Hosting and compute providers for the application and databases
  • Email / communications providers used to send mail you trigger

We stay responsible for subprocessors. A current vendor DPA/terms pack is kept with our compliance records.

6. Assistance and incidents

We will help you respond to data-subject requests that concern Customer Data, to the extent the product does not already let you do it.

If we become aware of a security incident affecting Customer Data, we will notify you without undue delay and give information we have so you can meet your own notice duties.

7. Return and deletion

When the subscription ends, you may export Customer Data while your account remains open. After that we delete or de-identify Customer Data from production systems within a reasonable period, except copies we must keep for law, backups (until they expire), or dispute resolution.

8. How this DPA is accepted

You accept this DPA by (a) using the Services after this page is published, or (b) signing an order form that incorporates the Terms. No extra wet-ink signature is required for standard subscriptions.

Enterprise customers who need a countersigned PDF can email support@leadstats.io.

9. Contact

Leadstats IO LLC
134 Three Degree Rd, Pittsburgh, PA 15237
support@leadstats.io