1. Introduction & Scope
This Data Processing Addendum ("DPA") describes how Fiesta Labs Inc. ("Fiesta Labs", "we") processes personal data on behalf of users of AI Fiesta, and supplements our Privacy Policy. It applies wherever we process personal data subject to the GDPR or comparable data protection laws.
2. Definitions
"Personal data", "processing", "controller", "processor" and "data subject" have the meanings given in the GDPR. "Sub-processor" means a third party engaged by Fiesta Labs to process personal data on our behalf.
3. Roles
For account, billing, and usage data, Fiesta Labs acts as the data controller. Where we process content you submit (prompts, files) to provide the service, we act as a processor on your instructions.
4. Data Protection Officer
Our appointed Data Protection Officer oversees compliance with this DPA and applicable data protection law:
Data Protection Officer: Mehul Saraogi
5. Nature & Purpose of Processing
We process personal data to provide AI Fiesta: account management, generating AI responses to your prompts, subscription billing, service communications, security, and - with your consent - usage analytics (see the Cookies Policy).
6. Sub-Processors
We use the following sub-processors to deliver the service:
| Sub-processor | Location | Purpose of processing |
|---|---|---|
| Third-party AI model providers (OpenAI, Anthropic, Google, xAI, et al.) | USA | Generating AI responses to user prompts. |
| TagMango Inc / TagMango Pvt Ltd | USA / India | Payment processing and subscription billing. |
| Stripe, Inc. | USA | Card payments and subscription billing for users outside India. |
| Cashfree Payments India Pvt Ltd | India | Payments and subscription billing for users in India. |
| Razorpay Software Pvt Ltd | India | Recurring subscription mandates and payment processing. |
| Apple Inc. | USA | In-app purchase billing and subscription management for App Store purchases. |
| Cloudflare, Inc. | USA (global edge network) | Hosting, CDN, and edge compute. |
| Google LLC | USA | Usage analytics (GA4 / Tag Manager) - only with your consent. |
| PostHog, Inc. | USA | Product analytics and feature flags. |
| Functional Software, Inc. (Sentry) | USA | Error monitoring. |
| Dub Technologies, Inc. | USA | Affiliate and referral attribution. |
We will update this list when we add or replace a sub-processor.
7. Security Measures
We apply encryption in transit, access controls, secure secrets management, and monitoring appropriate to the risk of the processing.
8. International Transfers
Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) with our sub-processors.
9. Data Subject Requests
We assist with requests to access, correct, delete, restrict, or port personal data. Contact support@aifiesta.ai; see the Privacy Policy for the full list of your rights, including withdrawing consent at any time.
10. Breach Notification
We notify affected users and competent authorities of personal data breaches without undue delay, as required by applicable law.
11. Deletion & Return
On account deletion or termination of the service, we delete or anonymize personal data unless retention is required by law.
12. Contact
- support@aifiesta.ai
- Fiesta Labs Inc., 1 Chestnut Hill Plaza #1088, Newark, DE 19713, Delaware, USA