Data Processing Addendum

Data Processing Addendum

Public terms for customers of Resplendent Data services

Effective August 19, 2026

This Data Processing Addendum (“Addendum”) applies when Resplendent Data (“Resplendent,” “we,” or “Processor”) processes Customer Personal Information on behalf of the customer that purchases or uses the services (“Customer” or “you”). It forms part of the agreement under which Resplendent provides the services (the “Agreement”), including any order form or subscription. By entering an order or using the services, Customer agrees to this Addendum.

How the product actually syncs, stores, and deletes data, and how Eric uses OpenAI, is described in the public Data handling page: https://docs.resplendentdata.com/account/data-handling.

1. Roles

Customer is the controller (or “Business” under the CCPA) of Customer Personal Information. Resplendent is the processor (or “Service Provider”) and processes that information only to provide the services.

2. Definitions

Customer Personal Information means information Resplendent processes on Customer’s behalf that identifies, relates to, or could reasonably be linked to a particular person or household, to the extent it is protected as personal information (or an equivalent term) under applicable data protection laws.

CCPA means the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq., and its implementing regulations.

Processing means any operation performed on Customer Personal Information, including collection, storage, use, disclosure, or deletion.

Sell and Share have the meanings set forth in the CCPA.

Applicable Data Protection Laws means the privacy and data protection laws that apply to the Processing, which may include U.S. state laws such as the CCPA.

3. Instructions

Resplendent will process Customer Personal Information only on Customer’s documented instructions. The Agreement, this Addendum, and Customer’s use of the services are those instructions. Any additional instructions require prior written agreement.

4. Resplendent’s commitments

Resplendent will:

• Process Customer Personal Information only for the business purposes of providing the services under the Agreement.
• Ensure people who process Customer Personal Information are bound by a duty of confidentiality.
• Not Sell or Share Customer Personal Information.
• Not retain, use, or disclose Customer Personal Information for any purpose other than providing the services, or outside the direct business relationship with Customer, except as permitted by Applicable Data Protection Laws.
• Not combine Customer Personal Information received on Customer’s behalf with personal information received from another person or collected from Resplendent’s own interaction with a consumer, except as permitted by Applicable Data Protection Laws.
• Provide reasonable assistance to Customer, taking into account the nature of the processing and the information available to Resplendent, so Customer can respond to consumer privacy requests and conduct data protection assessments required by Applicable Data Protection Laws.

5. Security and breach notice

Resplendent will use appropriate technical and organizational measures to protect Customer Personal Information, taking into account the nature of the processing.

If Resplendent becomes aware of a security incident involving Customer Personal Information, Resplendent will notify Customer without undue delay and will provide information reasonably available so Customer can meet its own notification obligations. Further details about how data is handled in the product are on the Data handling page linked above.

6. Sub-processors

Customer authorizes Resplendent to use the sub-processors listed in Annex I, and to engage additional sub-processors, provided that Resplendent (a) has a written contract with each sub-processor that imposes data-protection obligations consistent with this Addendum, and (b) remains responsible to Customer for the sub-processor’s acts and omissions in connection with the processing.

Resplendent will post updates to the sub-processor list on this Addendum (or a successor URL). Customer may object in writing within 15 days of a change. The parties will work in good faith to address a reasonable objection.

7. Deletion and return

At Customer’s direction, Resplendent will delete or return Customer Personal Information upon termination of the services, or earlier upon request, unless retention is required by law. On request, Resplendent will provide written confirmation of deletion. Keeping data after termination requires Customer’s express written approval.

In the product, deleting a dataset removes that synced source data immediately. Synced source data is not backed up. Deleting a dataset does not delete the Customer’s account, company profile, or other account information. Resplendent does not use the contents of synced datasets for marketing. Account-level facts (for example, which integrations are connected) may be used for customer communications. See the Data handling page: https://docs.resplendentdata.com/account/data-handling.

8. Demonstrating compliance

On Customer’s reasonable request, Resplendent will make available information reasonably necessary to demonstrate its compliance with this Addendum. Resplendent may satisfy that request by providing existing documentation or third-party reports. Any more detailed review is limited to once per 12-month period, scheduled in advance, and conducted in a way that does not disrupt operations or compromise other customers’ data.

9. Liability

Each party’s liability under this Addendum is subject to the limitations of liability in the Agreement. This Addendum does not expand either party’s liability beyond what the Agreement already provides.

10. Changes

Resplendent may update this Addendum by posting a revised version at the URL where it is published. The updated Addendum applies to the services going forward. If Customer believes a change materially reduces the protections for Customer Personal Information, Customer may object in writing within 30 days and the parties will work in good faith to resolve it.

Annex I — Sub-processors

Customer authorizes the following sub-processors:

This public Addendum is the standard terms for the services. A separately signed addendum, if any, controls over this page for that customer.