Legal

Data Processing Addendum

Last updated: June 10, 2026

For individual creators, FRIXIA acts as data controller and the Privacy Policy applies. This page concerns agencies and business customers that manage creators through FRIXIA.

1. When a DPA applies

If you are an agency or company using FRIXIA to protect content on behalf of the creators you manage, FRIXIA processes those creators' personal data on your instructions. In that case FRIXIA acts as processor under art. 28 GDPR and a Data Processing Addendum is required.

2. Executing a DPA

Write to legal@frixia.ai from your business email and we will provide our standard DPA for signature. The DPA incorporates the European Commission's Standard Contractual Clauses where applicable.

3. Subprocessors

Current subprocessors: Supabase (database, auth, storage), Vercel (web hosting), Fly.io (backend hosting, EU), Stripe (payments), Resend (transactional email, EU), Serper (search queries on public handles only). We will notify business customers of subprocessor changes as set out in the DPA.

Questions about this document: legal@frixia.ai