Back to SpecMind

Data Processing Addendum

Last updated: April 19, 2026.

This Data Processing Addendum ("DPA") forms part of the Terms of Use between the customer ("Customer", "Controller") and Runic LLC d/b/a SpecMind ("SpecMind", "Processor") and applies to SpecMind's processing of Personal Data on Customer's behalf. By accepting the SpecMind Terms of Use or using SpecMind in a way that involves Personal Data, Customer enters into this DPA.

1. Definitions

Terms not defined here have the meaning given in the GDPR or the California Consumer Privacy Act, as applicable. "Personal Data" means information SpecMind processes on behalf of Customer that identifies or could identify a natural person, such as a client name, email, phone, or property address entered into an inspection record.

2. Scope & roles

Customer is the Controller and SpecMind is the Processor of Personal Data Customer submits to the platform (inspector and team accounts, contact records, inspection client details, agreement signatures). SpecMind processes this data only to provide the SpecMind service and on Customer's documented instructions.

3. Subject matter, duration, nature, purpose

  • Subject matter: processing of Personal Data necessary to provide the SpecMind inspection platform.
  • Duration: the term of Customer's SpecMind subscription, plus any post-termination retention required for legal, billing, or report-archival purposes.
  • Nature and purpose: storing, displaying, and transmitting inspection records; processing payments via Stripe; delivering reports to inspection clients; sending transactional notifications.
  • Categories of data: inspector accounts, team member accounts, inspection client contact details, property information, signature images, payment amounts (not card data), report content authored by Customer.
  • Categories of data subjects: inspectors, team members, inspection clients, real estate agents.

4. Processor obligations

SpecMind agrees to:

  • Process Personal Data only on Customer's documented instructions (which include using the SpecMind platform per its intended purpose).
  • Ensure persons authorized to process Personal Data are bound by confidentiality obligations.
  • Implement and maintain the technical and organizational measures described in the Security page.
  • Assist Customer in responding to data subject rights requests (access, deletion, portability) as reasonably required.
  • Notify Customer without undue delay (and in any case within 72 hours of becoming aware) of a Personal Data Breach affecting Customer's data, with information sufficient to meet Customer's notification obligations.

5. Subprocessors

Customer authorizes SpecMind to engage subprocessors to process Personal Data on Customer's behalf. The current list is maintained on the Security page. SpecMind will notify Customer of material changes via the Security page at least 30 days before the change takes effect; Customer may object in writing within that window.

6. International transfers

SpecMind primarily processes Personal Data in the United States. Where Customer's use of the service results in transfers of Personal Data subject to GDPR outside the EEA, SpecMind will rely on Standard Contractual Clauses or another approved transfer mechanism. Customer may request a copy of the applicable documentation from legal@specmind.ai.

7. Audits

SpecMind will make available to Customer the information necessary to demonstrate compliance with this DPA. Where an audit is required by applicable law, the parties will agree on scope, timing, and reasonable expense allocation in advance.

8. Deletion & return of data

Upon termination of the underlying subscription, Customer may export inspection data via the in-product export. SpecMind will delete or anonymize Customer's Personal Data within 90 days of termination, except where retention is required by law (e.g., tax records related to billing). Past reports remain viewable at their share-link URLs unless Customer requests deletion.

9. Order of precedence

In case of conflict between this DPA and the SpecMind Terms of Use, this DPA controls solely with respect to processing of Personal Data.

10. Contact

DPA inquiries: legal@specmind.ai.