Data Processing Agreement

Last updated: June 20, 2026

This Data Processing Agreement ("DPA") forms part of the Terms of Service between the customer ("Controller") and Synthfy LLC, operating the Mailexs platform ("Mailexs", "we", "us", or "our") ("Processor") and applies where Mailexs processes personal data on the customer's behalf under the GDPR and comparable laws.

1. Roles

For lead and recipient data that you upload and send to through the Service, you are the Controller and Mailexs is the Processor. For account and billing data, Mailexs is the Controller (see the Privacy Policy).

2. Scope & Instructions

Mailexs processes personal data only to provide the Service and on your documented instructions, unless required to act otherwise by law. The subject matter is cold-email outreach; the duration is the term of your subscription.

3. Categories of Data & Subjects

• check_circleData subjects: your business contacts and prospects.
• check_circlePersonal data: names, business email addresses, company and role information, and email engagement events you generate.

4. Confidentiality & Security

Mailexs ensures personnel are bound by confidentiality and maintains technical and organizational measures appropriate to the risk, including encryption of credentials at rest, access controls, and logging.

5. Sub-processors

You authorize Mailexs to engage sub-processors (e.g., Google Cloud Platform, mailbox/domain providers, and the payment processor) under written terms that impose data-protection obligations no less protective than this DPA. We will inform you of material changes to our sub-processors.

6. Data Subject Requests & Breach

Mailexs will assist you, taking into account the nature of processing, in responding to data-subject requests and will notify you without undue delay after becoming aware of a personal-data breach affecting your data.

7. International Transfers

Where personal data is transferred across borders, the parties rely on a lawful transfer mechanism such as the EU Standard Contractual Clauses.

8. Deletion & Return

On termination, Mailexs will delete or return personal data processed on your behalf, except where retention is required by law.