Data Processing Addendum
This Data Processing Addendum (DPA) covers Albi's processing of personal and commercial data on your behalf. Normally you bring your own organization's data, so you act as controller and Albi as processor. If you bring a third party's data in, you act as processor and Albi as your sub-processor. Albi processes it only on your instructions. This is a working draft pending counsel review.
Roles
You determine what data enters Albi and why; Albi processes it only to provide the service and on your documented instructions.
Albi personnel
Delivering the managed service means named Albi pricing experts access your data. They are staffed to your account only, bound by confidentiality, and their access is logged. Where an expert is a contractor rather than an employee, equivalent obligations flow down. Final terms pending counsel review.
Scope of processing
Imported CSV/Excel data and, if connected, read-only Stripe data, processed to deliver analysis, benchmarking, research, design, and exports.
Security measures
Per-project encrypted credentials, row-level security, per-route auth, and read-only Stripe scopes by default. See the Security page for current status.
Sub-processing
Albi uses the sub-processors listed in the Privacy Policy and flows down equivalent obligations.
No training; deletion
Your data is not used to train models. On termination or request, data is exported and/or deleted. Contact hello@albiagents.com to execute a signed DPA.
Last updated: working draft · Contact hello@albiagents.com