Data Processing Addendum

1. Roles

Customer is the Controller of personal data entered into OmniOps (customer contacts, job notes, messages). OmniOps is the Processor and processes that data only on documented instructions (providing the Service).

2. Nature of processing

• Categories: names, phones, emails, addresses, service history, payment metadata (card data handled by Stripe, not stored by OmniOps).
• Purpose: field service CRM, scheduling, invoicing, communications, and support.
• Duration: for the subscription term plus legal retention.

3. Subprocessors

Current subprocessors are listed at /legal/subprocessors. Material changes are announced with reasonable notice.

4. Security & assistance

OmniOps implements appropriate technical and organizational measures (encryption in transit, access controls, tenant isolation). We assist with data subject requests, breach notice (without undue delay), and audits as required by applicable law and the signed DPA.

5. International transfers

Where personal data is transferred outside the EEA/UK, OmniOps relies on Standard Contractual Clauses or equivalent safeguards with subprocessors.

6. Related documents

• Privacy Policy
• Terms of Service
• Subprocessors