Data Processing Addendum

Last updated: 6 November 2026

This DPA applies where you process personal data of data subjects in the EEA, UK, Switzerland or similar jurisdictions through the service.

1. Roles

You are the controller, we are the processor for account and billing data. For prompt content, you instruct us to transmit it to the upstream model provider you select; that provider acts under its own terms.

2. Our obligations

• Process data only on your documented instructions.
• Keep confidentiality of personnel with access.
• Apply appropriate technical and organisational security measures.
• Assist with data subject requests and breach notification.
• Delete or return data at the end of the agreement.

3. Sub-processors

We use cloud hosting, payment processing and model inference providers. A current list is available on request. We give notice of changes so you can object.

4. International transfers

Where data leaves your region we rely on Standard Contractual Clauses or an equivalent mechanism.

5. Contact

dpa@tapixai.com