This Data Processing Addendum is maintained by Fiesta Labs Inc. to describe how Mesh API processes personal data and to list the sub-processors we rely on. It supplements our Privacy Policy and is current as of 25 August, 2026.

1. Introduction & Scope

This Data Processing Addendum ("DPA") describes how Fiesta Labs Inc. ("Fiesta Labs", "we") processes personal data on behalf of users of Mesh API, and supplements our Privacy Policy. It applies wherever we process personal data subject to the GDPR or comparable data protection laws.

2. Definitions

"Personal data", "processing", "controller", "processor" and "data subject" have the meanings given in the GDPR. "Sub-processor" means a third party engaged by Fiesta Labs to process personal data on our behalf.

3. Roles

For account, billing, and usage data, Fiesta Labs acts as the data controller. Where we process content you submit (prompts, files) to provide the service, we act as a processor on your instructions.

4. Data Protection Officer

Our appointed Data Protection Officer oversees compliance with this DPA and applicable data protection law:

Data Protection Officer: Venkatesh Raju

Email: dpo@meshapi.ai

5. Nature & Purpose of Processing

We process personal data to provide Mesh API: account management, handling API requests, subscription billing, service communications, security, and — with your consent — usage analytics (see the Cookies Policy).

6. Sub-Processors

We use the following sub-processors to deliver the service:

Sub-Processor Name	Location	Purpose of Processing
Google Cloud Platform (GCP)	Global / United States	Cloud infrastructure hosting, VPC networking, database management (Cloud SQL), and core compute.
Cloudflare, Inc.	United States	Content delivery network (CDN), DDoS mitigation, WAF, and edge SSL/TLS encryption management.
AI Model Providers	Depends on provider	Processing API requests and generating responses based on the model you select.
TagMango Inc.	India	Payment gateway processing, billing metadata management, and invoicing fulfillment.
Cashfree Payments India Pvt Ltd	India	Payments and subscription billing for users in India.
Scrut Automation	India / United States	Information security governance, continuous compliance monitoring, and automated audit logging.

We will update this list when we add or replace a sub-processor.

7. Security Measures

We apply encryption in transit, access controls, secure secrets management, and monitoring appropriate to the risk of the processing.

8. International Transfers

Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) with our sub-processors.

9. Data Subject Requests

We assist with requests to access, correct, delete, restrict, or port personal data. Contact contact@meshapi.ai; see the Privacy Policy for the full list of your rights, including withdrawing consent at any time.

10. Breach Notification

We notify affected users and competent authorities of personal data breaches without undue delay, as required by applicable law.

11. Deletion & Return

On account deletion or termination of the service, we delete or anonymize personal data unless retention is required by law.

12. Contact

📧 contact@meshapi.ai

📍 Fiesta Labs Inc., 1 Chestnut Hill Plaza #1088,
Newark, DE 19713, Delaware, USA