Data Processing Addendum (DPA)

This Data Processing Addendum applies to users subject to GDPR.

Raka AI acts as a Data Processor when processing personal data on behalf of users.

We commit to:

• Process data only under documented instructions
• Ensure confidentiality
• Implement security measures
• Assist with data subject requests
• Delete or return data upon termination

Users remain Data Controllers of their social media data.

Sub-processors

We use the following sub-processors to provide the Service:

• Supabase Inc. — database, authentication, file storage (EU/US)
• Vercel Inc. — website hosting and edge network (EU/US)
• Google LLC — AI generation (Gemini), YouTube API, sign-in (US)
• Anthropic PBC — AI assistance (Claude) (US)
• Stripe Payments Europe Ltd. — payment processing (EU)
• Meta Platforms Ireland Ltd. — Facebook/Instagram/WhatsApp publishing (EU)
• Shopify International Ltd. — store integration and billing (EU)
• Fal.ai / video-model providers — AI video rendering (US)

We will give notice of new sub-processors as required; transfers outside the EU rely on Standard Contractual Clauses or an adequacy decision.