Data processing agreement

1. Roles

You (the customer) are the data controller for the customer, supplier and employee data you enter or sync. MRPverse LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA, is the processor and acts only on your documented instructions, which are the Terms of Service and your use of the product.

2. Subject matter and duration

Processing covers the data needed to run the service: contact details of your customers and suppliers, order and shipping records, and the names and emails of your users. It lasts for the life of your subscription plus the 7-day deletion window.

3. Our obligations

• Process personal data only to provide the service, never for advertising or resale.
• Keep staff bound by confidentiality and limit access to what support requires, with every access logged.
• Apply the technical measures described on the Security page. Security
• Help you answer data-subject requests (access, correction, erasure) within 10 business days.
• Notify you of a personal-data breach without undue delay and at most 72 hours after confirmation.
• Delete or return all personal data when the agreement ends, except where law requires retention (invoices).

4. Sub-processors

We use the following providers. We will announce any addition on this page at least 14 days before it takes effect; you may object by email and terminate if we cannot resolve it.

5. International transfers

Where data leaves the EEA or UK, transfers rely on the EU Standard Contractual Clauses (2021) and the UK Addendum, which are incorporated into this agreement by reference.

6. Audits

Once a year, on 30 days' notice, you may request a written description of our controls and the audit reports of our sub-processors. We do not yet hold our own SOC 2 or ISO 27001 certification.

7. Signed copy

Need a countersigned PDF for your records or your own customers? Email support@mrpverse.com with your company name and we send it within 2 business days.