Kadence Data Processing Addendum
Last updated: June 22, 2026
This Data Processing Addendum ("DPA") forms part of the Kadence Terms of Service between Haun Lab LLC ("Processor", "we") and the Customer ("Controller", "you") and applies where we process personal data on your behalf in providing Kadence.
1. Roles and scope
You are the controller and we are the processor of "Customer Personal Data", meaning personal data within Customer Data that we process on your behalf (primarily business contact and firmographic data about prospects and decision-makers). You are responsible for the lawfulness of your instructions and for having a lawful basis to process Customer Personal Data.
2. Processing details
- Subject matter and duration: processing for the term of your subscription plus any wind-down period.
- Nature and purpose: hosting, storing, organizing, enriching, scoring, displaying, and transmitting Customer Personal Data to provide Kadence's prospecting and outreach features.
- Types of data: business names, titles, business email addresses and phone numbers, firmographic and public-record attributes, and related notes.
- Categories of data subjects: your prospects and their decision-makers and employees.
3. Our obligations
We will: (a) process Customer Personal Data only on your documented instructions, including as set out in the Terms and your use of the product, unless required by law; (b) ensure personnel with access are bound by confidentiality; (c) implement appropriate technical and organizational security measures; and (d) not sell Customer Personal Data or use it except to provide the service and as permitted by the Terms.
4. Sub-processors
You authorize us to engage the sub-processors listed on our Sub-processors page to process Customer Personal Data. We impose data-protection obligations on them consistent with this DPA and remain responsible for their performance. We will provide a mechanism to learn of new sub-processors and a reasonable opportunity to object on legitimate data-protection grounds before they begin processing.
5. Data subject requests
Taking into account the nature of the processing, we will provide reasonable assistance to help you respond to requests from data subjects to exercise their rights. If we receive such a request directly, we will route it to you or assist you in responding, rather than respond on your behalf, unless legally required.
6. Security incidents
We will notify you without undue delay after becoming aware of a personal data breach affecting Customer Personal Data, and will provide information reasonably available to us to help you meet your notification obligations.
7. Deletion and return
On termination of your subscription, or on your written request, we will delete or return Customer Personal Data, and delete existing copies, except where retention is required by law. Kadence provides account-deletion and data-export tooling to support this.
8. Audits
We will make available information reasonably necessary to demonstrate compliance with this DPA and, on reasonable prior written notice and subject to confidentiality, will cooperate with reasonable audits, which may be satisfied through up-to-date documentation or third-party reports where available.
9. International transfers
We process Customer Personal Data in the United States. You are responsible for ensuring any transfer of data to us is lawful under laws applicable to you.
10. General
This DPA is governed by the law of the State of Illinois. If there is a conflict between this DPA and the Terms regarding processing of Customer Personal Data, this DPA controls. To request a countersigned copy, contact taylor@haunlab.com.