Legal
Data Processing Agreement
Terms governing Reachase as a processor of your end-user personal data.
Last updated 2026-07-11
Scope
This Data Processing Agreement (DPA) applies when you use Reachase to process personal data on behalf of your end users. You act as the data controller. Reachase acts as the data processor.
By using Reachase paid or business features that process end-user personal data, you agree to this DPA in addition to our Terms of Service.
Subject matter and duration
Reachase processes personal data submitted through your contact forms, scheduling widgets, and related APIs for as long as your account is active and as needed to provide the service.
Nature and purpose of processing
- Hosting and storing form submissions and bookings.
- Delivering webhook notifications and email alerts you configure.
- Providing dashboard access, exports, and deletion tools.
- Security monitoring, rate limiting, and abuse prevention.
Categories of data subjects and personal data
- Your account administrators: name, email, organization details.
- Your end users: data fields you configure in forms and booking widgets.
- Technical data: IP address, user agent, timestamps where collected for security.
Location of processing
Primary hosting and database storage is in European Union (Germany) with netcup GmbH.
Our subprocessors process data in the European Union. Data may be transferred outside the EU when you configure webhooks or integrations, subject to appropriate safeguards where required.
Security measures
Reachase implements encryption in transit, access controls, and organizational measures designed to protect personal data.
You are responsible for securing API keys, webhook secrets, and access to your dashboard.
Subprocessors
You authorize Reachase to engage subprocessors listed at /subprocessors. We will provide notice of material changes.
Data subject requests
You are responsible for responding to requests from your end users. Reachase provides tools to export and delete project data from the dashboard.
Reachase will assist you with reasonable requests related to data we process on your behalf when you contact [email protected].
Deletion and return
Upon account termination or your written request, Reachase will delete or return personal data within a reasonable period, unless retention is required by law.
Contact
DPA inquiries: [email protected]
Version: 2026-07-11