🦑 Kraken

Data Processing Addendum

Effective: July 6, 2026

This Data Processing Addendum ("DPA") forms part of the agreement between HireKraken, a service of Port Direct Containers, LLC ("Kraken," "we," "us"), and the customer that uses the Service ("Customer," "you"). It governs how we process personal data on your behalf when we run outreach campaigns for you. If it conflicts with the Terms, this DPA controls for data-protection matters.

1. Roles of the Parties

For personal data we process to provide the Service, you are the controller and Kraken is the processor. Kraken processes such data only to provide the Service and only on your documented instructions, including as set out in this DPA and the Terms.

2. Nature & Purpose of Processing

Purpose: to source, enrich, contact, qualify, and book prospects for your campaigns, and to operate and support the Service.
Data subjects: the business prospects and contacts targeted by your campaigns, and your authorized users.
Categories of data: business contact information (such as company name, business email, phone, website, and role), campaign messaging and replies, and account details. We do not seek special-category data.
Duration: for the term of your use of the Service, subject to Section 9.

3. Your Responsibilities

You instruct us to process prospect data to run your campaigns and confirm you have a lawful basis to contact those prospects. You are responsible for the accuracy of instructions and for your own compliance obligations (for example, applicable email and calling laws).

4. Zero-Knowledge Suppression

Any do-not-contact or customer list you upload for suppression is hashed in your own browser (SHA-256) before it reaches us. We store only the resulting opaque hashes and use them solely to exclude those contacts from your own campaigns. We never see the underlying contacts, and we never use your suppression list to target, enrich, or cross-reference any other customer.

5. Confidentiality

We keep your data confidential and limit access to personnel and providers who need it to deliver the Service, all bound by confidentiality obligations.

6. Security

We maintain reasonable technical and organizational measures appropriate to the risk, including encryption of data in transit, access controls, and hosting with a reputable cloud provider. No system is perfectly secure.

7. Subprocessors

You authorize us to engage subprocessors to help deliver the Service. The categories of subprocessors we use are listed at hirekraken.com/subprocessors. We impose data-protection obligations on our subprocessors consistent with this DPA, and we remain responsible for their performance. We will provide notice of material changes to our subprocessors so you have a reasonable opportunity to review them.

8. Data-Subject Requests & Assistance

Taking into account the nature of the processing, we will provide reasonable assistance to help you respond to requests from data subjects and to meet your security, breach-notification, and impact-assessment obligations.

9. Return & Deletion

On termination, or at your written request, we will delete or return the personal data we process on your behalf within a reasonable period, except where retention is required by law.

10. Personal-Data Breach

We will notify you without undue delay after becoming aware of a personal-data breach affecting your data, and provide information reasonably available to help you meet your obligations.

11. International Transfers

The Service is operated from the United States. Where data is processed in other locations by a subprocessor, we rely on appropriate safeguards for any required transfers.

12. General

This DPA is governed by the laws of the State of Texas and is subject to the limitations of liability and other terms in the Terms. If any provision is unenforceable, the rest remains in effect.

13. Contact

Data-protection questions or requests? privacy@hirekraken.com