Last updated June 2026.
This Data Processing Agreement (DPA) describes how Cadrey handles personal data on your behalf when you use the service. It forms part of our Terms. If you need a countersigned copy for your records, email support@cadrey.ai and we'll provide one.
You are the controller of the personal data you and your customers put into Cadrey (contacts, conversations, bookings, and similar). Cadrey is the processor: we process that data only to provide the service, and only on your documented instructions, which include your use of the product's features.
We process personal data to run the features you turn on: capturing and organizing your contacts, answering and following up with your leads in your voice, scheduling, and reporting. We do not sell your data or your customers' data, and we do not use it to advertise to your customers.
We use a small set of trusted infrastructure and communications providers to deliver the service (for example, cloud hosting, our database, email and telephony delivery, and AI model providers). Each is bound by confidentiality and data-protection terms consistent with this DPA. We'll tell you about material changes to our sub-processors and give you a chance to object. A current list is available on request.
We use appropriate technical and organizational measures to protect personal data, including encryption in transit, tenant isolation so each workspace's data stays separate, access controls and least-privilege, and audit logging of sensitive actions.
If one of your customers asks to access, correct, or delete their data, the product gives you the tools to do it, and we'll assist where you can't do it yourself. We process personal data only as long as needed to provide the service or as you direct.
If we become aware of a personal-data breach affecting your data, we'll notify you without undue delay and share what we know so you can meet your own obligations.
Where data is transferred across borders, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) with our providers.
You can export your data at any time. When your account closes, we delete or return your personal data within a reasonable period, except where we're required to keep it by law.
Questions about data processing, or to request a signed DPA or our sub-processor list, email support@cadrey.ai.