Legal
Data processing agreement
When you upload or enroll contacts, you are the controller of that data and we process it for you. This is the summary of those terms.
Last updated 15 September 2026
Draft while Momentloft is in private beta. This page has not yet been reviewed by a lawyer. Questions: support.
Roles
You (the customer) are the controller of contact data. Media Yard LLC is the processor, acting only on your documented instructions — which are the sequences, schedules and settings you configure.
What we process
- Contact fields you provide (typically name, email address, company, and custom fields).
- The provenance note for each contact: the list or product event that enrolled them.
- Message content and mail events (sent, replied, bounced, unsubscribed).
Our commitments
- No use of your contact data for our own purposes, and no sale or sharing with other customers.
- Personnel with access are bound by confidentiality.
- Encryption in transit, and encryption at rest for credentials such as AI provider keys.
- Notice to you without undue delay after becoming aware of a personal data breach.
- Help responding to data subject requests about contacts you control.
- Deletion or return of contact data when you close your account.
Subprocessors
We use infrastructure providers for hosting and storage, and your own AI provider processes draft prompts under your account with them. A current subprocessor list is available on request, and we will give notice before adding one.
Signed copy
Need a countersigned DPA? Email support@momentloft.com.