Data Processing Agreement

1. Scope

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you ("Data Controller") and Recursive Labs Inc. ("Data Processor") for the use of Mosaic.

2. Data processing

We process personal data only as necessary to provide the Service and in accordance with your instructions. Currently, the only personal data we collect is email addresses submitted through our waitlist.

3. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

4. Sub-processors

We use the following sub-processors to provide the Service:

• Vercel — hosting and deployment
• Neon — database (PostgreSQL)

5. Data subject rights

We will assist you in responding to requests from data subjects exercising their rights under applicable data protection law, including rights of access, rectification, erasure, and data portability.

6. Data retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Waitlist data is retained until the product launches or you request deletion.

7. Contact

For data processing inquiries, contact privacy@recursive.ac.