DPA

01Parties and roles

This data processing agreement (the “DPA”) is between you (the “Customer”, controller) and Dinqr AB, org.nr 559461-8588, Örngatan 2, 311 68 Slöinge, Sweden (“Anyratio”, processor). It applies automatically when you use Anyratio to store or generate images that contain personal data you control — including Solo and Studio self-serve, not only Enterprise.

Anyratio remains an independent controller for account, billing, and website data, as described in the Privacy policy.

02Subject matter

Anyratio processes Customer personal data only to provide the Service: store masters, generate other aspect ratios, host view-only share links you enable, and support your account. Duration: while the account is open, then deletion as in the Privacy policy (typically within 30 days after account delete, except legal archives such as Stripe invoices).

Data: images you upload and we generate, job names, folder membership, and share tokens. Data subjects: people depicted in those images and any individuals you name in job titles. Nature: storage, transmission to the image model, and display to users you authorise.

03Instructions

We process that content only on your documented instructions: the actions you take in the product (upload, generate, share, delete) plus these terms. We will tell you if an instruction appears to breach GDPR. You warrant that you have a legal basis to upload the photos (consent, legitimate interest, or contract with the people depicted or your client).

04Security and staff

We apply technical and organisational measures described on /security: EU object storage, deny-all Firestore/Storage rules, session cookies, access checks on media, and encryption in transit. Staff and contractors who can access Customer data are bound by confidentiality.

05Sub-processors

You authorise the sub-processors listed in the Privacy policy (Google Cloud / Firebase / Gemini, Stripe for billing metadata only, Amazon SES, Sentry). We will post material changes on that page. Generation may leave the EU; other sub-processors may too, under SCCs or adequacy.

06Assistance, deletion, audits

We will assist with data-subject requests that concern Customer content we hold, breach notice without undue delay after we confirm a personal-data breach, and deletion or return of Customer content when you delete jobs or the account. Reasonable written security questions can be sent to hello@anyratio.ai. On-site audits are available to Enterprise under a separate schedule.

07Liability and law

Each party is liable for its own GDPR obligations. Liability between us follows the Terms. Swedish law. Contact hello@anyratio.ai.