Data Processing Addendum

Last updated: Apr 17, 2026 · Version: 2026-04-17.1

This page is a baseline addendum for paying coach workspaces and other business customers. It clarifies how coach-directed workspace data is processed without pretending that Lungeable is a medical provider or a generic enterprise data room.

At a glance

When this addendum applies

This Data Processing Addendum supplements the Terms of Service and Coach Business Terms for paying coach workspaces and other business use of Lungeable when a customer requests baseline controller/processor or service-provider style language and no separate signed DPA already controls.

If a separate written order form, master services agreement, or signed DPA applies, that written agreement controls to the extent it conflicts with this page.

If a customer needs negotiated security language, subprocessor notice commitments, regional transfer terms, or procurement-specific exhibits, that customer should request separate signed paper instead of relying on this public baseline alone.

Customer instructions and responsibility

The customer controls what coach-directed workspace content is entered into the Service and is responsible for ensuring it has the lawful basis, notices, permissions, and consents needed for that use. The customer is also responsible for the actions of its coaches, staff, and authorized users inside its workspace.

Lungeable role for coach-directed workspace content

For coach-directed workspace content, Lungeable processes data to host, secure, transmit, store, display, back up, troubleshoot, export, and delete that data as needed to provide and support the Service and as directed through the Service's product controls or documented support workflows.

Lungeable independent business operations

Lungeable separately determines and processes data for account administration, billing, subscription enforcement, fraud and abuse prevention, security review, auditability, incident response, service reliability, support, legal compliance, and limited product analytics or service-improvement work consistent with the public privacy disclosures.

Support access and subprocessors

Lungeable may use subprocessors and service providers to host, secure, monitor, support, and operate the Service. Current public providers are listed on our Subprocessors page.

Lungeable support or admin personnel may access limited customer or client data when needed for support, abuse prevention, security review, incident response, or legal compliance. Access is intended to be limited to the work required for that purpose.

Requests, retention, and deletion

Privacy, deletion, access, and correction requests may require identity verification and coach/client boundary review before action is taken. Deletion and retention remain subject to billing, tax, fraud-prevention, audit, legal, backup, and workspace-ownership obligations described in the Privacy Policy and Delete Account page.

Contact

Questions about this addendum or requests for a separate written DPA can be sent to support@lungeable.com.