Data Processing Agreement

Last updated: 1 November 2026

When Marginfort processes personal data of your customers for you, we act as your processor (service provider). Our Data Processing Agreement (DPA) uses the Common Paper Data Processing Agreement Standard Terms (version 1.1), which include the EU Standard Contractual Clauses and the UK Addendum, with the details below.

Key details

• Processor: Marginfort LLC. Controller: the customer.
• Purpose: providing the Marginfort service as described in the Terms (profit analysis, dispute drafting, stock, ad and payout alerts and the actions the customer enables).
• Data: order, shopper contact and delivery details, and dispute data from connected stores.
• Duration: while the store is connected; deleted within 30 days after disconnection or account closure, unless the law requires longer.
• Sub-processors: listed on our sub-processors page, with 30 days' notice of changes.
• Security: as described on our security page.
• Breach notice: without undue delay, aiming for 24 hours after confirmation.
• California (CCPA): we do not sell or share personal data, and use it only for the business purposes above.

To receive a signed copy, email privacy@marginfort.com.