Data Processing Addendum
A clear agreement for customer data.
This DPA forms part of the agreement between the customer and the FoundersMuse service provider identified in the applicable order, subscription or terms.
Instructions and confidentiality
FoundersMuse processes customer personal data only to provide, secure and support the service, follow documented customer instructions, and meet applicable law. People authorized to process it are bound by confidentiality duties.
Security
FoundersMuse maintains proportionate technical and organizational safeguards, including access controls, encrypted transport, protected credentials, tenant-scoped data access, monitoring and incident handling.
Subprocessors
The customer authorizes providers needed to operate the service. Where a provider processes customer personal data on behalf of FoundersMuse, it must accept protective obligations appropriate to that processing. FoundersMuse remains responsible for its subprocessor obligations.
Customer assistance
Taking account of the processing and information available, FoundersMuse will reasonably assist with data-subject requests, security reviews, breach duties, impact assessments and regulator consultations required by applicable data-protection law.
Incidents, return and deletion
FoundersMuse will notify the customer without undue delay after becoming aware of a confirmed personal-data breach affecting customer data. At the end of the service, customer data will be returned or deleted on request unless law requires retention; residual backups age out through normal retention cycles. Workspace owners can also initiate a secure erasure of stored LinkedIn credentials, permitted LinkedIn data, and related workspace records from Admin → Permissions.
Information and audits
FoundersMuse will provide information reasonably necessary to demonstrate these commitments. Audits must be proportionate, confidential, scheduled on reasonable notice and avoid unnecessary disruption or exposure of other customers’ data.
Operational providers
The services behind FoundersMuse.
Provider roles may change as the product develops. Material processing changes will be reflected here or communicated through the service.
- Cloudflare
- Application hosting, storage and delivery
- Clerk
- Authentication and account access
- OpenAI
- AI-assisted research, drafting and media generation
- Stripe
- Subscription and payment operations
International transfers
Where customer personal data is transferred across borders and a safeguard is required, the parties will use an appropriate legal mechanism, which may include the European Commission’s Standard Contractual Clauses or an applicable UK transfer mechanism.
Order of precedence. If this DPA conflicts with another agreement about processing customer personal data, this DPA controls for that processing. Commercial liability terms in the main agreement continue to apply.