Data Processing Agreement
Last updated: December 1, 2026
This Data Processing Agreement (the "DPA") is part of the Terms of Service between you and Dunzio Inc ("Dunzio"). It applies when Dunzio processes personal data on your behalf, for example the records that the users of your apps create ("Customer Personal Data").
1. Roles
For Customer Personal Data, you are the controller and Dunzio is the processor: you decide why and how the data is used, and Dunzio processes it to provide the Service to you.
The processing covers hosting, storing and transmitting Customer Personal Data, and using it to carry out your requests. It lasts for as long as you use the Service. The people and the kinds of data concerned are the ones you and the users of your apps choose to put into the Service.
For your own account data, Dunzio is the controller, and the Privacy Policy applies.
2. Your responsibilities
You are responsible for your content, including Customer Personal Data: for having the right to collect and process it, for the notices and consents the law requires, and for the instructions you give Dunzio.
You are responsible for how you use the results that the Service produces, and for the apps you deploy.
You must not put data into the Service that the law does not allow you to process there.
3. Dunzio's obligations
Dunzio will:
- process Customer Personal Data only to provide the Service and on your documented instructions, which include the Terms and the way you use the Service;
- make sure the people who are authorized to process it are bound to keep it confidential;
- protect it with the safeguards described in the Security Statement;
- tell you without undue delay after becoming aware of a breach of Customer Personal Data;
- give you reasonable help in answering requests from the people the data is about, and in meeting your own legal obligations.
4. Subprocessors
You authorize Dunzio to use these providers to process Customer Personal Data:
| Provider | What it does for Dunzio |
|---|---|
| Amazon Web Services | Hosting, storage and email delivery |
| Stripe | Payments |
| Anthropic | AI code generation |
| Higgsfield | AI image and video generation |
| ElevenLabs | AI speech generation |
| Google, GitHub | Sign-in, when you choose it |
Dunzio remains responsible to you for the work of its subprocessors. When this list changes, the updated list is posted on this page with a new date.
5. Deletion or return
You can delete your projects in the studio at any time. When your use of the Service ends, Dunzio will delete Customer Personal Data on your request, except for what the law requires it to keep. Deleted records may remain in Dunzio's systems, marked as deleted and no longer used, until they are erased.
6. How this DPA applies
This DPA is part of the Terms and needs no signature. If it conflicts with the Terms on the processing of Customer Personal Data, this DPA controls. The limits of liability in the Terms apply to this DPA.