Data Processing Addendum

Last updated: September 1, 2026

This Data Processing Addendum ("DPA") forms part of the Terms of Service between Landscapt ("Processor," "we") and the organization using the Landscapt and Equipt platform ("Customer," "Controller"). It describes how we process personal data on Customer's behalf. If you need a countersigned copy for your own compliance records, contact us at support@landscapt.com.

1. Roles

For personal data that Customer submits to the Service about its own clients, employees, or job sites ("Customer Personal Data"), Customer is the controller and Landscapt is the processor. Landscapt processes Customer Personal Data only to provide, maintain, and support the Service, and only on Customer's documented instructions, including those given through ordinary use of the Service's features.

2. Nature and Purpose of Processing

Landscapt processes Customer Personal Data to host, store, back up, and make it available to Customer's authorized users within the Service, and to provide related support, in each case for the duration Customer maintains an active account.

3. Categories of Data Subjects & Data

Data subjects may include Customer's clients, employees, contractors, and job-site contacts. Data typically includes names, addresses, phone numbers, email addresses, service and job history, and — where Customer chooses to enter it — payment or billing details processed through Customer's connected payment provider.

4. Confidentiality

Landscapt ensures that personnel authorized to process Customer Personal Data are subject to appropriate confidentiality obligations.

5. Security Measures

Landscapt maintains technical and organizational measures appropriate to the risk, including encryption of data in transit, database-level access controls scoped to each organization (row-level security), restricted administrative access, and routine backups.

6. Sub-Processors

Customer authorizes Landscapt to engage the following sub-processors to provide the Service:

Landscapt will impose data protection obligations on sub-processors consistent with this DPA and remains responsible for their performance. We will notify Customer of any intended change to this list where required by law, giving Customer the opportunity to object on reasonable data protection grounds.

7. Data Subject Requests

Where Landscapt receives a request from a data subject relating to Customer Personal Data, we will promptly forward it to Customer and provide reasonable assistance to help Customer respond, since Customer controls that data and its relationship with the data subject.

8. Security Incidents

Landscapt will notify Customer without undue delay after becoming aware of a confirmed breach of security leading to accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of Customer Personal Data, and will provide information reasonably available to help Customer meet its own notification obligations.

9. Return & Deletion of Data

Upon termination of the Service, Landscapt will, at Customer's choice, delete or make available for export Customer Personal Data, except where retention is required by law, within a reasonable period.

10. Audits

Landscapt will make available information reasonably necessary to demonstrate compliance with this DPA and will allow for audits, including inspections, conducted by Customer or an auditor mandated by Customer, subject to reasonable notice and confidentiality safeguards.

11. International Transfers

Where Customer Personal Data is transferred outside the jurisdiction in which it was collected, Landscapt will rely on appropriate safeguards recognized under applicable data protection law.

12. Term

This DPA remains in effect for as long as Landscapt processes Customer Personal Data on Customer's behalf under the Terms of Service.

13. Contact

Questions about this DPA, or need a signed copy? Contact us at support@landscapt.com.