Data Processing Addendum

1. Scope & Roles

This addendum forms part of the Full Scale Revenue LLC service agreement when we process personal information for a business customer. The customer determines the purposes and lawful instructions (the “controller” or “business”). Full Scale Revenue acts as its “processor” or “service provider,” as applicable. Our own account administration, billing, and business marketing are described separately in our Privacy Policy.

This addendum governs client-data processing if it conflicts with general service terms. Applicable privacy law means laws that apply to the particular processing; naming a right does not make every statute applicable to every customer.

2. Processing Description

• Purpose: provide and support the website, CRM, messaging, booking, automation, and AI features in the customer’s order.
• Operations: collect, organize, store, retrieve, transmit, summarize, export, and delete information needed for those features.
• People: the customer’s leads, customers, staff, and authorized users.
• Information: contact and business details, inquiries, appointments, communications, consent/opt-out records, and enabled call recordings or transcripts.
• Duration: the service term and the limited return, deletion, or legally required retention periods below.

Do not submit regulated health information, payment credentials, government identifiers, or other sensitive data unless we have expressly agreed in writing to support it with the necessary safeguards and agreements.

3. Instructions & Restrictions

We process client data only on documented instructions to provide the contracted services or as required by law. The agreement, approved configuration, and authorized support requests are instructions. We will inform the customer if an instruction appears to violate applicable privacy law and may pause that processing while it is resolved.

We will not sell or share client data for cross-context advertising, use it outside the direct business relationship, or combine it with data from other customers or our own sources except where applicable law permits. We will not use customer lists for our own campaigns. We will comply with applicable service-provider/processor restrictions and notify the customer if we can no longer meet them.

4. Customer Responsibilities

The customer supplies lawful instructions, accurate information, required notices, appropriate permissions, and records of consent. It determines campaign eligibility, opt-out exclusions, recording rules, and permitted users. It must not supply purchased lists for prohibited outreach. Both parties remain responsible for their own legal obligations.

5. Confidentiality & Security

Access is limited to authorized people and providers who need it for the services and are subject to appropriate confidentiality obligations. We maintain reasonable safeguards proportionate to the data and processing risks, including access controls and encrypted transmission. Customer account security and user access remain shared responsibilities.

We notify the customer without undue delay after becoming aware of a personal-data breach affecting its data, provide available information, and reasonably cooperate with investigation and legally required notifications. Information may be supplied in stages. Notification is not an admission of fault; applicable shorter deadlines still control.

6. Service Providers

The customer authorizes GoHighLevel/LeadConnector to provide CRM, communications, booking, and automation, and the hosting, email, telephone, and AI providers necessary for the features in its order. We use written obligations appropriate to the processing, including required confidentiality, security, and data-use restrictions, and remain responsible to the extent applicable law requires.

Before a new provider processes client data, we will identify its role and provide notice and an opportunity to raise reasonable data-protection objections where required. Contact us for the provider list applicable to your specific configuration. Advertising partners acting for our own marketing are not automatically subprocessors of your private customer data.

7. Rights, Assessments, & Oversight

We reasonably assist the customer with applicable privacy requests, security duties, assessments, and regulator inquiries, taking account of the service and information available. We direct a request about customer-controlled data to the customer unless law requires another response. We do not disclose or delete that data without proper authority.

We make information reasonably needed to demonstrate compliance available and cooperate with reasonable assessments or audits required by applicable law, subject to confidentiality, security, and protection of other customers. Where applicable law provides, the customer may take reasonable steps to monitor and remediate unauthorized use. Any extraordinary assistance fees must be agreed in advance and may not defeat mandatory rights.

8. Return, Deletion, & Transfers

At service end, the customer may request available standard exports within 30 days. We delete remaining working copies within 60 days unless applicable legal or provider retention requirements apply. Retained records remain protected and limited to the permitted retention purpose; backups follow restricted retention and deletion cycles. Export limits and any separately owned platform data are addressed in the order.

We do not rely on this addendum alone to authorize restricted international transfers. If a customer’s processing requires additional transfer terms or regulated-data agreements, they must be in place before that processing begins.

9. Contact

Use our Privacy Request Form or email us below.
Include your business name and the service involved.
Do not include passwords or sensitive records.

Full Scale Revenue LLC
N4616 Hickory Rd
Hustisford, WI 53034
Privacy@FullScaleRevenue.com
(262) 912-0610