Data Processing Agreement
Last updated: 1 June 2026
This summary DPA describes how IgniteOS processes personal data on behalf of customers ("controllers") who use the platform. A full signable DPA is available on request.
Roles
When you use IgniteOS to manage your contacts and communications, you are the data controller and IgniteOS is the data processor acting on your documented instructions.
Scope of processing
- Subject matter: providing the IgniteOS platform.
- Data subjects: your contacts, leads, customers and team.
- Data types: contact details, communications, booking and payment metadata you store.
- Duration: for as long as your account is active, plus any legally required retention.
Our commitments
- Process personal data only on your instructions and to provide the service.
- Keep data confidential and ensure staff are bound by confidentiality.
- Apply appropriate technical and organisational security measures.
- Assist with data-subject requests and breach notification.
- Support deletion or return of data on termination.
Sub-processors
The platform is operated by HighLevel Inc. (United States), with hosting on Google Cloud and AWS. We also use other vetted sub-processors (for example messaging and payment providers) under contracts that require equivalent protection. A current list is available on request, and we'll notify you of material changes.
International transfers
Where data is transferred across borders, we rely on recognised safeguards such as standard contractual clauses where applicable.
Security
Your customer data is hosted on Google Cloud and AWS with encryption in transit and at rest, automated backups and access controls. See our security page.
Questions?
Email [email protected] or visit our contact page.