Legal
Data Processing Addendum
Last updated: June 10, 2026
For individual creators, FRIXIA acts as data controller and the Privacy Policy applies. This page concerns agencies and business customers that manage creators through FRIXIA.
1. When a DPA applies
If you are an agency or company using FRIXIA to protect content on behalf of the creators you manage, FRIXIA processes those creators' personal data on your instructions. In that case FRIXIA acts as processor under art. 28 GDPR and a Data Processing Addendum is required.
2. Executing a DPA
Write to legal@frixia.ai from your business email and we will provide our standard DPA for signature. The DPA incorporates the European Commission's Standard Contractual Clauses where applicable.
3. Subprocessors
Current subprocessors: Supabase (database, auth, storage), Vercel (web hosting), Fly.io (backend hosting, EU), Stripe (payments), Resend (transactional email, EU), Serper (search queries on public handles only). We will notify business customers of subprocessor changes as set out in the DPA.
Questions about this document: legal@frixia.ai