This Data Processing Agreement (DPA) supplements Kloup's Terms of Service and applies whenever a customer's use of Kloup involves processing personal data subject to GDPR, UK GDPR, or comparable regional regulations. For signed counterparts or sub-processor lists, email legal@kloup.com.
1. Roles
Customer is the controller of personal data uploaded into the workspace. Kloup is the processor, acting on documented instructions from the customer.
2. Subject matter and duration
Processing covers personal data that the customer (or its authorised users) submits to the Kloup workspace. Processing runs for as long as the customer's account is active, plus any retention windows required by law.
3. Categories of data
- Identifiers: name, email, phone, social profile URLs.
- Professional data: employer, role, investor focus, notes.
- Communication metadata: meeting attendees, email subject lines, calendar invites pulled in via the Google integration.
- File contents the customer uploads to the data room.
4. Sub-processors
Kloup uses Cloudflare (compute, storage, CDN), Google (authentication and Drive/Calendar APIs at customer direction), SendGrid (transactional email), and Apollo (contact enrichment at customer direction). Full list with addresses and roles available on request.
5. Security
See our security page for the measures in force. TLS in transit, AES-256 at rest, principle of least privilege, audit-trailed access.
6. International transfers
Where personal data is transferred outside the EEA / UK / Switzerland, Kloup relies on the EU Standard Contractual Clauses (2021/914) plus the UK Addendum where applicable.
7. Data subject rights
Kloup will assist the customer in responding to data-subject requests (access, deletion, rectification, portability) within the timelines required by applicable law.
8. Audits
Customers may request audit information annually under NDA. Kloup provides current SOC 2 reports, penetration test summaries, and the sub-processor inventory through that channel rather than over public pages.
9. Contact
Privacy or DPA questions: privacy@kloup.com. Security issues: security@kloup.com.