Data Processing Agreement (DPA)
This Agreement governs the processing of personal data by Zenbitx LLC (“Processor”) on behalf of its users (“Controller”). This document ensures our operations align with the General Data Protection Regulation (GDPR) and other global privacy standards.
1. Designation of Roles
DATA CONTROLLER
The User / Organization
Responsible for determining the purpose and lawful basis of data processing.
DATA PROCESSOR
Zenbitx LLC (Pixizen)
Processes data strictly according to the documented instructions of the Controller.
2. Processing Scope & Infrastructure
Processing includes user-submitted prompts, files, metadata, and billing info. Our infrastructure is powered by authorized sub-processors who maintain equivalent data protection standards:
Primary Sub-Processor: Amazon Web Services, Inc. (AWS)
Role: Cloud Infrastructure & Secure Data Storage. Transfers are governed by AWS Standard Contractual Clauses (SCCs).
5. Security & Incident Response
Processor implements robust technical measures, including AES-256 encryption at rest and TLS in transit. In the event of a personal data breach:
72-Hour Mandate: Processor shall notify the Controller without undue delay, and no later than 72 hours, after confirming a personal data breach.
7. Data Subject Rights & Deletion
Processor shall assist the Controller in fulfilling requests for access, erasure (“Right to be Forgotten”), or data portability. Upon termination of service or a valid deletion request, data will be anonymized or purged from live systems and backups in accordance with our retention policy.
9. Audit & Inspection
The Controller retains the right to conduct an annual audit or inspection of the Processor’s compliance with this DPA. Zenbitx LLC agrees to provide reasonable cooperation, documentation, and evidence of security measures to support these reviews.
13. Jurisdiction
This Agreement is governed by the laws of New Mexico, USA. Exclusive jurisdiction for disputes resides with the state and federal courts of New Mexico.
DPA Status: Active
This Data Processing Agreement is a fundamental component of the service relationship between the Controller and Zenbitx LLC.