Reclass · reclass.app
Data Processing Addendum
This addendum describes Reclass processing customer personal data on behalf of a customer organization. Contact privacy@reclass.app if a countersigned copy or additional transfer terms are required.
Version: 25 August 2026
Roles and instructions
The customer is the controller or authorized processor of workspace data; Reclass acts as processor. Reclass processes personal data only to provide, secure, maintain, support, and document the service, according to the agreement, product settings, and lawful written instructions.
Processing details
Processing covers collection from connected sources, storage, organization, matching, retrieval, AI-assisted analysis, export, retention, and deletion. Data subjects may include leads, students, former students, guardians, payers, staff, and workspace users. Data categories are described in the Privacy Policy and depend on customer configuration.
Confidentiality and security
Personnel and providers with access are bound by confidentiality. Reclass maintains measures appropriate to the service, including encrypted transport, encrypted integration secrets, access control, tenant isolation, audit trails, rate limits, backups, monitoring, vulnerability remediation, and incident procedures.
Subprocessors
The customer authorizes infrastructure, database, AI, email, monitoring, and payment subprocessors needed to deliver Reclass. Reclass remains responsible for their processing obligations within the scope required by applicable law and will provide current subprocessor information on request.
Assistance
Taking into account the nature of processing, Reclass will reasonably assist with data-subject requests, security assessments, breach obligations, deletion or return, and information needed for customer compliance. The customer remains responsible for the substance and lawfulness of its response.
Security incidents
Reclass will notify the customer without undue delay after confirming a personal-data breach affecting its workspace, and will provide available information about scope, likely consequences, containment, and remediation. Notification is not an admission of fault.
Return and deletion
During the service the owner can export workspace data. Following termination or a verified deletion instruction, Reclass deletes customer data from active systems and allows backups to expire under the documented retention schedule, unless retention is legally required.
Transfers and audits
Where processing crosses borders, the parties will use an applicable transfer mechanism when required. Reclass will provide reasonable compliance information and support proportionate audits subject to confidentiality, security, and non-disruption safeguards.
Priority and contact
If this addendum conflicts with general service terms regarding personal-data processing, this addendum controls. Privacy and DPA requests should be sent to privacy@reclass.app.