Data Processing Addendum

Effective Date: 24th Aug, 2026

1. Introduction & Scope

This Data Processing Addendum ("DPA") describes how Fiesta Labs Inc. ("Fiesta Labs", "we") processes personal data on behalf of users of AI Fiesta, and supplements our Privacy Policy. It applies wherever we process personal data subject to the GDPR or comparable data protection laws.

2. Definitions

"Personal data", "processing", "controller", "processor" and "data subject" have the meanings given in the GDPR. "Sub-processor" means a third party engaged by Fiesta Labs to process personal data on our behalf.

3. Roles

For account, billing, and usage data, Fiesta Labs acts as the data controller. Where we process content you submit (prompts, files) to provide the service, we act as a processor on your instructions.

4. Data Protection Officer

Our appointed Data Protection Officer oversees compliance with this DPA and applicable data protection law:

Data Protection Officer: Mehul Saraogi

📧 support@aifiesta.ai

5. Nature & Purpose of Processing

We process personal data to provide AI Fiesta: account management, generating AI responses to your prompts, subscription billing, service communications, security, and - with your consent - usage analytics (see the Cookies Policy).

6. Sub-Processors

We use the following sub-processors to deliver the service:

Sub-processorLocationPurpose of processing
Third-party AI model providers (OpenAI, Anthropic, Google, xAI, et al.)USAGenerating AI responses to user prompts.
TagMango Inc / TagMango Pvt LtdUSA / IndiaPayment processing and subscription billing.
Stripe, Inc.USACard payments and subscription billing for users outside India.
Cashfree Payments India Pvt LtdIndiaPayments and subscription billing for users in India.
Razorpay Software Pvt LtdIndiaRecurring subscription mandates and payment processing.
Apple Inc.USAIn-app purchase billing and subscription management for App Store purchases.
Cloudflare, Inc.USA (global edge network)Hosting, CDN, and edge compute.
Google LLCUSAUsage analytics (GA4 / Tag Manager) - only with your consent.
PostHog, Inc.USAProduct analytics and feature flags.
Functional Software, Inc. (Sentry)USAError monitoring.
Dub Technologies, Inc.USAAffiliate and referral attribution.

We will update this list when we add or replace a sub-processor.

7. Security Measures

We apply encryption in transit, access controls, secure secrets management, and monitoring appropriate to the risk of the processing.

8. International Transfers

Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) with our sub-processors.

9. Data Subject Requests

We assist with requests to access, correct, delete, restrict, or port personal data. Contact support@aifiesta.ai; see the Privacy Policy for the full list of your rights, including withdrawing consent at any time.

10. Breach Notification

We notify affected users and competent authorities of personal data breaches without undue delay, as required by applicable law.

11. Deletion & Return

On account deletion or termination of the service, we delete or anonymize personal data unless retention is required by law.

12. Contact

📧 support@aifiesta.ai

📍 Fiesta Labs Inc., 1 Chestnut Hill Plaza #1088,
Newark, DE 19713, Delaware, USA

© 2026 AI Fiesta. All rights reserved.

ContactPrivacy PolicyTerms of ServiceCookies PolicyDPARefund Policy

We use cookies to keep AI Fiesta working and, only with your permission, to measure how it's used. Learn more