Legal Document

Data Processing Agreement

Thairo Studios · KVK 42027881Version May 2026

GDPR / AVG

Your data, our responsibility.

When you use AIRO AI, we process personal data on your behalf. Below you will find the key agreements summarised. Download the full legal version via the button below.

Download the full Data Processing Agreement

Version May 2026

01

Who are we and what is this document?

  • Thairo Studios (Chamber of Commerce 42027881) acts as the Processor of your data when using AIRO AI.
  • You as the client are the Controller — you determine which data we process.
  • This document has been drawn up in accordance with Article 28 of the GDPR and is legally required.
02

What data do we process?

  • Name and contact details of your employees, clients or leads (name, email, phone number).
  • Communication data: WhatsApp messages and emails processed via AIRO AI.
  • Website usage data: leads, form data and behavioural data on your website.
  • We never process special categories of personal data (health, religion, etc.) unless agreed in writing.
03

What do we use your data for?

  • Solely to provide the AIRO AI services you have purchased from us.
  • Never for our own commercial purposes, analyses or resale.
  • We always act on the basis of your instructions.
04

How do we secure your data?

  • Encrypted data storage and transfer (TLS/SSL).
  • Access control: only staff with strict necessity have access.
  • Regular backups and security checks.
  • In the event of a data breach, we will inform you within 72 hours.
05

Which sub-processors do we use?

  • Anthropic PBC (Claude AI, USA) — for AI text processing.
  • Meta Platforms Ireland Ltd. (WhatsApp Business API) — for message handling.
  • Other cloud providers compliant with GDPR requirements.
  • We always inform you in advance of any changes to sub-processors.
06

Your rights as Controller

  • You retain full control over the data of your employees and clients at all times.
  • You can always request access to, correction of, or deletion of processed data.
  • Upon termination of the agreement, we delete all data within 30 days upon your request.
  • We never independently respond to GDPR requests from data subjects — always in consultation with you.
07

Confidentiality & duration

  • All our staff are bound by confidentiality regarding your data.
  • This obligation also applies after termination of the agreement.
  • This agreement automatically runs alongside the main agreement (AIRO AI subscription).
  • Upon cancellation of your AIRO AI subscription, this agreement also ends.
08

Questions?

Do you have questions about the processing of your data? Send an email to support@thairostudios.com or write to Minerva 11, 6121NP Born, the Netherlands.