Data Processing Agreement

Last updated: March 2026

1. Scope

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Void Suite ("Processor") and the customer ("Controller"). It applies to all personal data processed by Void Suite on behalf of the customer in connection with the Void Suite platform.

2. Data Processing

Categories of data: Email content, contact information, company metadata, and usage analytics.

Purpose: Providing AI-powered email management, CRM, and business intelligence services as described in the service agreement.

Duration: For the duration of the service agreement, plus 30 days for data deletion after termination.

3. Sub-processors

Void Suite uses the following sub-processors:

MongoDB Atlas — Database hosting (US/EU)
Vercel — Application hosting (Global edge)
OpenAI / Anthropic / Google — AI processing (US)
Stripe — Payment processing (US)
Resend — Transactional email (US)

4. Data Subject Rights

Void Suite will assist the Controller in responding to data subject requests including access, rectification, erasure, restriction, portability, and objection. Requests can be submitted to privacy@voidsuite.com and will be processed within 30 days.

5. Security Measures

Void Suite implements appropriate technical and organizational measures as described in our Security page, including encryption at rest and in transit, access controls, and regular security assessments.

Request a Signed DPA

Enterprise customers can request a signed copy of this DPA.

legal@voidsuite.com