Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the Terms of Service between you ("Controller") and Vyronex ("Processor") and applies when Vyronex processes personal data on your behalf.

1. Subject Matter & Duration

Vyronex processes personal data to provide the Service for the duration of your subscription and any post-termination period required to return or delete data.

2. Nature and Purpose

Hosting, transcoding, AI-assisted metadata generation, and delivery of audio resource packs, plus account administration and support.

3. Categories of Data & Data Subjects

• Account holders (email, display name, authentication identifiers).
• End-users represented in uploaded audio (voice recordings, where applicable).
• Usage and diagnostic data linked to authenticated accounts.

4. Vyronex Obligations

• Process personal data only on your documented instructions.
• Ensure personnel are bound by confidentiality.
• Implement appropriate technical and organizational measures.
• Assist you with data-subject requests and impact assessments where required.
• Notify you of confirmed personal-data breaches without undue delay.

5. Subprocessors

Current subprocessors:

• Lovable Cloud — application hosting, database, storage, and authentication.
• Lovable AI Gateway — AI inference for renaming and metadata.
• Stripe — payment processing (when billing is enabled).

We will provide notice of new subprocessors and give you a reasonable opportunity to object on legitimate data-protection grounds.

6. International Transfers

Where personal data is transferred out of the EEA/UK/Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

7. Deletion & Return

On termination, we will delete or return personal data within a reasonable period unless retention is required by law.

8. Audits

On reasonable request, we will provide information necessary to demonstrate compliance with this DPA, including third-party attestations where available.