This DPA applies when your organisation uses MapMyAI OrgScan and AliceSolutions Group / MapMyAI processes personal data on your instructions. It supplements the Terms of Service and Privacy Notice.
You (the customer organisation) are the controller of employee directory data, survey answers, and policy acknowledgements you collect. MapMyAI is the processor for that customer content. For admin account records and billing metadata, MapMyAI and Paddle act as independent controllers of their respective records.
We process customer content only to provide OrgScan: authentication, campaigns, acknowledgements, analytics aggregates, entitlements, retention, and erasure features you enable. We do not sell customer content or use it to train public models.
Current categories: hosting / database infrastructure; Paddle (payments as merchant of record); optional email delivery provider when configured (Resend or Postmark). A current list is available on request at support channels published on mapmyai.co. Material changes will be communicated to organisation admins.
Where processing occurs outside your country, we rely on appropriate safeguards required by applicable law (including contractual protections with sub-processors).
We assist with data-subject requests that relate to platform-held personal data, within the product capabilities (access, correction pathways, and erasure for directory / participant identifiers). Customer content follows each organisation’s retention settings. On verified termination or erasure instruction, we delete or anonymise customer content except records we must keep for legal, security, or accounting reasons.
Privacy and processing questions: use the organisation console contact / support path, or AliceSolutions Group via the MapMyAI service inquiry form. This document is orientation for contracting — have counsel review before regulated procurement.