Data Processing Addendum
Last updated: July 17, 2026
This Data Processing Addendum ("DPA") supplements the Finance Hero Terms of Service and applies whenever Finance Hero ("Processor") processes personal information about your customers ("Customer Data") on your behalf as the controller / business ("Controller").
1. Roles and scope
With respect to Customer Data, you are the "controller" or "business" and Finance Hero is the "processor" or "service provider" under applicable U.S. state privacy laws. Finance Hero will only process Customer Data on your documented instructions and to provide the Service.
2. Purpose and duration
Finance Hero processes Customer Data to: (a) store the records you upload, (b) send the follow-up communications you configure, (c) track engagement for you, and (d) provide reporting and support. Processing continues for the term of the Service.
3. Categories of data and data subjects
- Data subjects: your customers.
- Categories: name, email, phone number, vehicle information, delivery date, product interest, engagement events (opens, clicks, unsubscribes).
4. Your responsibilities
- Provide notice to your customers and obtain any required consents to send follow-up communications.
- Only upload data you are lawfully permitted to process.
- Respond as the controller to consumer rights requests.
5. Finance Hero's obligations
- Process Customer Data only on your instructions and to provide the Service.
- Restrict access to personnel who need it and bind them to confidentiality.
- Maintain administrative, technical, and physical safeguards appropriate to the risk.
- Assist you, at your reasonable request, with data-subject requests, security incident response, and required assessments.
- Not sell Customer Data and not use it for cross-context behavioral advertising.
6. Sub-processors
You authorize Finance Hero to engage sub-processors to help provide the Service. Current sub-processors include our cloud hosting provider, managed database, email delivery service, and payment processor. We remain responsible for their performance. A list of current sub-processors is available on request from privacy@financehero.app.
7. Security incidents
Finance Hero will notify you without undue delay after becoming aware of a security incident affecting Customer Data and will cooperate in good faith with your investigation.
8. Return and deletion
On termination, Finance Hero will delete Customer Data within a reasonable period, except where retention is required by law.
9. Contact
DPA questions: privacy@financehero.app.