Data Processing Agreement

Last updated: November 26, 2025

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Igris Inertial Inc. ("Processor" and "Igris Inertial") and you ("Controller").

1. Subject Matter

Igris Inertial acts as a Processor of personal data only when routing requests using your own API keys (BYOK). We do not store, log, or retain any prompts, outputs, or personal data beyond transient in-memory processing.

2. Nature and Purpose of Processing

Transient routing of requests to third-party AI providers. No training, no profiling, no storage.

3. Duration

As long as you use the Service.

4. Types of Personal Data

None — we do not collect or process personal data. All data is processed under your direct control via BYOK.

5. Categories of Data Subjects

Not applicable — no personal data processed.

6. Security Measures

AES-256 encryption in transit and at rest (memory only), TLS 1.3, regular penetration testing.

7. Sub-processors

Polar.sh (billing), Plausible.io (anonymous analytics). List available on request.

8. Your Rights

You may request deletion or audit at any time: support@igrisinertial.com

This DPA is governed by the laws of Delaware, United States.