Data Processing Addendum

For personal data that customers upload or store in their StackswiseSoft workspace, the customer is the data controller and StackswiseSoft is the data processor. StackswiseSoft only processes customer personal data on documented instructions from the customer, primarily to provide and support the service.

Typical categories of personal data processed on behalf of customers:

• Account data: name, email, workspace role.
• Content data: documents, notes, CRM contacts, deals, tasks, comments and files that customers choose to upload.
• Usage and log data: request timestamps, IP address, action performed.

StackswiseSoft engages a limited set of sub-processors listed on our Sub-processors page. We remain responsible for their performance under this DPA. We will give customers reasonable prior notice of new sub-processors so they can object on legitimate grounds.

StackswiseSoft implements appropriate technical and organisational measures, including encryption in transit and at rest, role-based access, audit logging, principle of least privilege, secure software development practices, and a documented incident-response process. See the Security page for more detail.

Where personal data is transferred outside the UK / EEA, StackswiseSoft relies on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses (2021/914) together with appropriate supplementary measures.

StackswiseSoft will provide reasonable assistance to help customers respond to data subject requests, and will notify the customer without undue delay after becoming aware of a personal data breach affecting the customer's data.

On termination, StackswiseSoft will delete or return customer personal data within a reasonable period, save for retention required by law. Customers can also request export at any time.

Cookies set on stackswisesoft.com are described in our Privacy Policy. Non-essential cookies are only set with the user's prior consent, captured via the in-app cookie banner and stored per browser.

To countersign a formal DPA including the SCCs and UK IDTA, email legal@stackswisesoft.com from a verified customer address with your legal entity name and address. We will countersign and return within five business days.

This page is a plain-language summary maintained by StackswiseSoft. It is not legal advice and the executed DPA prevails in the event of any conflict.

• Legal entity: Zireto Winnie Ris Limited (trading as StackswiseSoft)
• Company number: 16969923 (registered in England & Wales)
• Registered office: 19 Irvine Street, Leigh, England, WN7 1ND, United Kingdom
• Telephone: +44 7999 270267
• Privacy contact: privacy@stackswisesoft.com