Legal

Data Processing Agreement

Terms governing Reachase as a processor of your end-user personal data.

Last updated 2026-07-11

Scope

This Data Processing Agreement (DPA) applies when you use Reachase to process personal data on behalf of your end users. You act as the data controller. Reachase acts as the data processor.

By using Reachase paid or business features that process end-user personal data, you agree to this DPA in addition to our Terms of Service.

Subject matter and duration

Reachase processes personal data submitted through your contact forms, scheduling widgets, and related APIs for as long as your account is active and as needed to provide the service.

Nature and purpose of processing

  • Hosting and storing form submissions and bookings.
  • Delivering webhook notifications and email alerts you configure.
  • Providing dashboard access, exports, and deletion tools.
  • Security monitoring, rate limiting, and abuse prevention.

Categories of data subjects and personal data

  • Your account administrators: name, email, organization details.
  • Your end users: data fields you configure in forms and booking widgets.
  • Technical data: IP address, user agent, timestamps where collected for security.

Location of processing

Primary hosting and database storage is in European Union (Germany) with netcup GmbH.

Our subprocessors process data in the European Union. Data may be transferred outside the EU when you configure webhooks or integrations, subject to appropriate safeguards where required.

Security measures

Reachase implements encryption in transit, access controls, and organizational measures designed to protect personal data.

You are responsible for securing API keys, webhook secrets, and access to your dashboard.

Subprocessors

You authorize Reachase to engage subprocessors listed at /subprocessors. We will provide notice of material changes.

Data subject requests

You are responsible for responding to requests from your end users. Reachase provides tools to export and delete project data from the dashboard.

Reachase will assist you with reasonable requests related to data we process on your behalf when you contact [email protected].

Deletion and return

Upon account termination or your written request, Reachase will delete or return personal data within a reasonable period, unless retention is required by law.

Contact

DPA inquiries: [email protected]

Version: 2026-07-11