Data Processing Agreement

This DPA applies when you use Statero to track AI usage tied to your end users (e.g. user_id values). You are the data controller; Statero acts as processor for event data you submit via the API.

By using Statero for such data, you agree to this DPA in addition to our Terms of Service and Privacy Policy.

• Subject matter: AI usage and cost tracking for your application
• Duration: For the term of your Statero account
• Categories of data subjects: Your end users whose IDs you send
• Types of personal data: User identifiers, usage metadata, optional subscription data from RevenueCat webhooks
• Processing operations: Storage, aggregation, display in dashboard, API responses

As controller, you must:

• Have a lawful basis to process and share end-user data with Statero
• Provide privacy notices to your users where required
• Honor data subject requests for data you control; we assist on request
• Not send special category data unless explicitly agreed in writing

Statero will:

• Process data only on your documented instructions (API usage and console settings)
• Ensure personnel with access are bound by confidentiality
• Implement appropriate technical and organizational measures (see Security)
• Notify you of personal data breaches without undue delay
• Assist with DPIAs and regulatory requests where reasonable
• Delete or return data when you delete apps or close your account, subject to backup retention

We use subprocessors listed on our Subprocessors page. We will update that page when subprocessors change materially.

Data may be processed in the EU and, where subprocessors operate elsewhere (e.g. United States), appropriate safeguards such as Standard Contractual Clauses apply where required.

For a countersigned PDF or enterprise amendments, contact support@statero.app.