AuraLeads CRM
Data Processing Addendum
Last updated: July 21, 2026 · Version: 2026-07-21
This Addendum forms part of the Terms when a business customer uses AuraLeads to process personal data for which it is responsible.
1. Roles and instructions
The customer is the controller or responsible party and AuraLeads is its processor or service provider for customer data. AuraLeads will process that data only to provide and secure the CRM, follow documented lawful instructions, and comply with applicable law. The customer is responsible for notices, lawful bases, data accuracy and user permissions.
2. Processing details
The subject matter is CRM hosting and related support for the subscription term. Processing may include collection, organization, storage, retrieval, transmission at the customer’s direction, restriction, deletion and backup. Data subjects may include the customer’s leads, prospects, clients, staff and contractors. Data types are described in the Privacy Policy.
3. Confidentiality and security
People authorized to process customer data are bound by confidentiality. AuraLeads maintains proportionate technical and organizational safeguards including access control, tenant isolation policies, encrypted transport, managed infrastructure, logging and credential restrictions.
4. Subprocessors and transfers
The customer authorizes the subprocessors listed on our Subprocessors page. AuraLeads remains responsible for requiring relevant data-protection obligations from them. We will post material additions or replacements before they take effect when reasonably possible. The customer may object on substantiated data-protection grounds by contacting privacy@getauraleads.com.
5. Assistance and incidents
Taking into account the nature of processing, AuraLeads will reasonably assist with verified data-subject requests, security obligations and legally required assessments. We will notify the customer without undue delay after confirming a personal-data breach affecting its customer data and provide available information needed for its response.
6. Return, deletion and evidence
At termination, the customer may export available data before closing the account. On request, AuraLeads will delete or return customer data unless retention is legally required; provider backups expire under their rotation schedules. We will provide information reasonably necessary to demonstrate compliance, subject to confidentiality, security and reasonable scope.
7. Priority and contact
This Addendum controls over conflicting Terms only for processing of customer-controlled personal data. Contact privacy@getauraleads.com for a signed copy or customer-specific lawful-transfer terms if required.
Related contact: privacy@getauraleads.com