Data processing agreement
Version 1.0, September 2026. This DPA needs review by a lawyer before commercial launch.
Roles
For personal data your team exports or processes inside your workspace, you are the controller and Horivo is the processor. For building and maintaining the shared company database, Horivo is an independent controller.
Processing
Horivo processes contact data of people in professional roles solely to provide the prospecting service: search, scoring, enrichment, export and CRM sync on your instruction.
Subprocessors
Horivo uses subprocessors for hosting, AI analysis, search, contact data, email and payments. Horivo informs you of changes; you may object on reasonable grounds.
Security
Access control per workspace with row level security, encryption in transit and at rest, audit logging of unlocks and exports, and the principle of data minimisation: contacts are only fetched after an unlock.
Data subject requests
Horivo operates a public data subjects page, honours erasure within 72 hours and maintains a permanent suppression list. Horivo forwards requests that concern your exports to you.
Deletion
On termination your workspace data is deleted within 30 days. The shared company database (without your workspace data) is unaffected.