Data Processing Agreement

1. Roles & scope

You are the Controller and PixelMod is the Processor of any personal data contained in content you submit to the Service. PixelMod processes such data only to provide the Service and only on your documented instructions (including via the Terms and your use of the product).

2. Processor obligations

• • Process personal data only on your documented instructions, including for international transfers, unless required by law.
• • Ensure persons authorized to process the data are bound by confidentiality.
• • Implement appropriate technical and organizational security measures (Annex II).
• • Engage sub-processors only under Section 3 and impose equivalent obligations on them.
• • Assist you, insofar as possible, in responding to data-subject requests and in meeting your security, breach-notification, and impact-assessment obligations.
• • Notify you without undue delay after becoming aware of a personal-data breach.
• • At your choice, delete or return personal data at the end of the services, except where retention is legally required.
• • Make available information necessary to demonstrate compliance and allow for reasonable audits.

3. Sub-processors

You provide general authorization for PixelMod to engage the sub-processors listed at /subprocessors. PixelMod will inform you of intended changes and give you the opportunity to object on reasonable data-protection grounds.

4. International transfers

Where processing involves transfers of personal data outside the EEA/UK, the parties will rely on an appropriate transfer mechanism, such as the EU Standard Contractual Clauses (and the UK Addendum), which are incorporated by reference.

5. Liability & term

Each party's liability under this DPA is subject to the limitations of liability in the Terms. This DPA remains in effect for as long as PixelMod processes personal data on your behalf.

Annex I — Details of processing

• • Subject matter: AI background removal and image processing via the Service.
• • Duration: the term of your subscription.
• • Nature & purpose: transient processing of submitted images to return a result; images are deleted after processing.
• • Categories of data subjects: individuals depicted in the images you submit.
• • Categories of data: image content you choose to submit; account/contact data of your authorized users.

Annex II — Security measures

Encryption in transit; access controls and least privilege; transient in-memory image processing with automatic deletion after processing; service logging and monitoring; authentication controls; usage controls; and contractual safeguards with sub-processors.

Annex III — Sub-processors

As listed and maintained at /subprocessors.