Last Updated: September 16, 2026

KickoffLabs uses technical and organizational safeguards designed to protect customer data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, and unauthorized access. This page provides a general description without exposing operational details that could weaken those safeguards. The measures in our Data Processing Addendum apply to customer personal data processed on a customer’s behalf.

What customers can do

Security is a shared responsibility. Customers should:

• Use a strong, unique password and protect account credentials.
• Grant access only to trusted team members and limit each person’s permissions to what they need.
• Use secure connections and appropriate encryption when exporting or transmitting lead data outside KickoffLabs.
• Delete campaigns and lead data that are no longer needed.
• Promptly notify support@kickofflabs.com of suspected unauthorized access.

Access and application security

• Account passwords are stored using one-way hashing and cannot be retrieved in plain text.
• Login pages, the application, and supported public endpoints use TLS to encrypt data in transit.
• Controls are designed to limit brute-force login attempts, abusive traffic, and suspicious activity.
• Customer data is logically segregated by account. Application authorization and tenant-scoped access controls are used to prevent one customer from accessing another customer’s data.
• Access to production systems and customer data is limited to authorized personnel with a business need and is subject to confidentiality obligations.

Infrastructure, availability, and recovery

• KickoffLabs uses established cloud infrastructure and hosting providers. Current providers that may process customer personal data are listed on our Subprocessor page.
• Backups and recovery procedures are maintained to support restoration following an incident or service disruption.
• Service health, application errors, and security-relevant events are monitored to support detection, investigation, and response.
• Administrative access and production changes are restricted to authorized personnel and managed through controlled operational processes.

Secure operations

• Personnel receive training on security and privacy practices, including phishing and social-engineering risks.
• KickoffLabs maintains procedures for incident triage, containment, investigation, remediation, and customer notification.
• Dependencies, vulnerabilities, and material service providers are reviewed as appropriate to the risk and the Services.
• Safeguards are periodically reviewed and improved as technology, threats, and the Services change.

Data lifecycle

• The Services provide controls supporting access, export, correction, and deletion of customer and lead data.
• Account and campaign deletion requests initiate deletion workflows for associated active data, subject to legal obligations and ordinary-course backup retention.
• Data retained in backups remains protected and is removed according to backup lifecycle schedules.
• KickoffLabs seeks to minimize the customer personal data it retains and to keep it only as long as needed to provide the Services or meet legal obligations.

Privacy and transfer protections

• Our Data Processing Addendum includes the European Commission’s 2021 Standard Contractual Clauses, the UK International Data Transfer Addendum, and Swiss transfer adaptations.
• We publish the current providers that may process customer data on our Subprocessor page.
• We provide reasonable information and cooperation for customer security reviews, transfer assessments, data protection impact assessments, and audits as described in the DPA.

Responsible disclosure

If you believe you have discovered a vulnerability, please do not disclose it publicly. Send enough detail for us to reproduce and evaluate the issue to support@kickofflabs.com. We review reported security concerns and prioritize them based on potential impact.

If you believe your account has been compromised or you see suspicious activity, contact support@kickofflabs.com immediately.