Data Processing Agreement (DPA)

1. Scope and purpose

MizuAlign processes personal data on behalf of the Customer solely to provide the financial tracking and budgeting services described in the Terms of Service.

2. Data processing details

• Nature: Storage, retrieval, analysis of financial records
• Purpose: Budget tracking, receipt management, financial reporting
• Data subjects: Customer employees and team members
• Data types: Names, email addresses, financial transaction data
• Retention: Duration of subscription plus 30 days post-termination

3. Security measures

MizuAlign implements appropriate technical and organizational measures including encryption in transit and at rest, access controls, audit logging (Enterprise), and regular security reviews. See our Security overview for details.

4. Sub-processors

MizuAlign uses vetted sub-processors for hosting (Supabase), authentication, payments (Stripe), and bank connectivity (Plaid). A current list is available on request at hello@mizualign.com.

5. Contact

DPA and procurement questions: hello@mizualign.com