Data Processing Agreement
Last updated: July 6, 2026
This is a placeholder DPA for v1. For enterprise customers, we sign a full DPA on request.
Overview
SalesSeam processes personal data on behalf of our customers in the course of delivering weekly prospecting CSVs. The categories of data, purposes of processing, and retention periods are described in our Privacy Policy, which forms the operational baseline of our data handling. Our subprocessors are listed below. On account deletion we erase personal data, retaining only a one-way, irreversible hash of the email, used solely to prevent repeated free trials.
Subprocessors
We use the following third-party service providers (subprocessors) to deliver the service. Each processes data only as needed to perform its function, under its own data protection terms.
- Supabase: database, authentication, and file storage
- Railway: application and background worker hosting
- Resend: transactional and delivery email
- Cloudflare: DNS and inbound email routing
- Apify: company hiring-signal collection
- Anthropic: drafting the first-line opener for each lead
- Google Analytics: website usage analytics
We will update this list as our providers change.
Merchant of record
Dodo Payments is our Merchant of Record. As Merchant of Record, Dodo Payments handles payment data as an independent controller under its own Data Processing Agreement, not as our processor. See dodopayments.com/legal/data-processing-agreement.
Custom DPA terms
For enterprise procurement teams that need bespoke DPA language (security questionnaires, sub-processor lists, audit clauses, SCCs), email sunny@salesseam.com with subject “DPA request” and we'll send a draft within five business days.