Data Processing Agreement
The processing terms available to business and team purchasers, on request.
Not yet reviewed by a lawyer
Who needs one
If you are buying Mochi for a business, and your staff use it in the course of their work, your organisation is likely to be a controller and will want a processing agreement in place.
What is unusual about this one
The scope is small, because the product is local. Notes, audio, transcripts, voice profiles and screen captures never reach a Mochi server, so they fall outside any processing carried out on your behalf. What remains is the account record, the subscription record, and the single photograph used to generate a pet, if that path is used at all.
Meeting recordings are worth calling out separately. They stay on the employee's Mac. If your organisation needs them retained, deleted on a schedule, or made available for a legal hold, that is a device management question rather than something a processor agreement with us can answer.
How to get it
Write to hi@brandnuits.com with the legal name of the contracting entity. There is no portal and no self-serve signature flow.
Placeholder, pending legal review
No data processing agreement has been drafted yet, so there is nothing to send today. A request will get an honest answer rather than a document.
The reviewed agreement needs to cover: subject matter and duration, categories of data subject and data, the processor's obligations, sub-processor authorisation and the notice period for changes, security measures, breach notification timing, assistance with data subject requests, deletion and return at the end, audit rights, and standard contractual clauses for transfers outside the EEA and the UK.
Who you are dealing with
Mochi is published by Nuits, a Finnish toiminimi (sole trader).
The registered business address and business ID are withheld for privacy and are available on request. Write tohi@brandnuits.com and you will get them.
All legal and support enquiries go to the same address:hi@brandnuits.com.