Data Processing Agreement

Discuss a DPA with us

If your organization needs a Data Processing Agreement (DPA), contact [email protected]. Include your organization’s legal name, workspace email, country, and the features you plan to use. Please describe the types of data involved without sending personal data about your customers or recipients.

This page explains how to contact us about data-processing terms. It is not itself a DPA and does not automatically enter your organization into one. If a DPA is required for your use, arrange it with us before providing that personal data to Migma.

When a DPA is relevant

A DPA addresses personal data a service processes on an organization’s behalf. For Migma, this may include personal data in prompts, uploaded content, contact lists, email campaigns, or connected services, depending on the features you use. The data-processing roles depend on the activity and the parties’ instructions.

Our handling of information for our own account administration, billing, and other purposes is described in our Privacy Policy.

What to cover

• The processing purpose, duration, data categories, and people whose data is involved.
• Your instructions and the responsibilities of Migma and your organization.
• Confidentiality, security measures, and assistance with data rights and security incidents.
• Service providers, including AI providers, their processing locations, and arrangements for international transfers.
• How prompts, uploads, and outputs are handled, including retention and any use for model training.
• Data return and deletion, provider changes, and information needed to demonstrate compliance.

Contact

Send DPA and data-processing questions to [email protected]. General use of Migma is covered by our Terms of Use.