Home/Legal/Data Processing Addendum (DPA)

Data Processing Addendum (DPA)

Controller/processor framework for customer outreach data processed by PitchTrack.

Last updated: 2026-03-02

Roles

Customer acts as Data Controller for outreach data submitted into PitchTrack workflows.

PitchTrack acts as Data Processor to provide campaign, tracking, analytics, and support services.

Processing scope

Processing is limited to operational functions required for authenticated sending, campaign execution, and reporting.

  • Contact storage and segmentation.
  • Template and campaign content operations.
  • Open/click tracking event processing.
  • Issue diagnosis and support follow-up.

Security measures

PitchTrack applies technical and organizational controls appropriate to service risk profile, including authenticated access, scoped OAuth usage, and operational safeguards.

Subprocessors

Current subprocessors and processing purposes are listed in the Subprocessors notice.

Customers with enterprise requirements can request review workflows through support.

Data subject requests

Customers should route DSAR actions through their own governance process and can request processor assistance through support.

Trust Center

Security and privacy architecture overview.

Contact Support

Request compliance docs or submit data/security concerns.