Data Processing Addendum
Last updated: March 2026
This Data Processing Addendum describes how Korekko processes customer data on behalf of users of the service.
1. Roles
For customer data that a business user submits to Korekko, the business user acts as the controller or business owner of that data, and Korekko acts as a processor or service provider for the limited purpose of delivering the service.
2. Processing instructions
Korekko processes customer data only on documented instructions from the customer as reflected in the product configuration, connected features, and support requests, and only as needed to provide the service.
3. Types of data
Data may include names, contact details, enquiry records, bookings, payment-related records, notes, reviews, activity history, and related business workflow data that the customer chooses to use in Korekko.
4. Security measures
Korekko uses reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, use, alteration, or disclosure.
5. Personnel and confidentiality
Access to personal data is limited to personnel and service providers who need such access to operate, support, and secure the service, and who are subject to appropriate confidentiality obligations.
6. Subprocessors
Korekko may use infrastructure and service providers to help operate the service, including hosting, databases, communications, storage, authentication, and payment support providers. These subprocessors may process data only as necessary to support the service.
7. Assistance
Where reasonably required, Korekko will provide appropriate assistance to help customers respond to lawful requests relating to personal data, taking into account the nature of the processing and information available to Korekko.
8. Return or deletion
Upon valid request and subject to legal, security, billing, or recordkeeping requirements, Korekko will delete or return personal data within a reasonable period.
9. Contact
DPA questions may be sent to team@korekko.com.