Legal
Sub-processors
Last updated August 23, 2026
These are the third parties that process Customer Data on our behalf to deliver the Service, under the Data Processing Addendum. “Feature-dependent” means the provider only receives Customer Data if you use that feature. We notify customers of changes by administrative email before a new sub-processor begins processing Customer Data.
| Sub-processor | Purpose | Data received | Scope |
|---|---|---|---|
| Supabase | Authentication, database, file storage | Account identifiers, content, connection tokens | Mandatory |
| Vercel | Hosting & delivery | Request metadata, content in transit | Mandatory |
| Anthropic | Script writing | Prompts, topics | Feature-dependent |
| BytePlus (Seedance) | AI video scene generation | Prompts, reference media | Mandatory |
| Kling | AI video scene generation (4K / fallback) | Prompts, reference media | Feature-dependent |
| kie.ai | AI video scene generation (premium model routing) | Prompts | Feature-dependent |
| Google (Veo) | AI video scene generation (Veo 3.1, routed via kie.ai) | Prompts | Feature-dependent |
| OpenAI | Catalog-voice TTS, transcription, moderation | Scripts, audio | Mandatory |
| ElevenLabs | Voice cloning & cloned-voice TTS | Voice samples, scripts | Feature-dependent |
| Tavus | Video-avatar face replicas | Avatar reference media | Feature-dependent |
| fal.ai | Image generation & lip-sync | Prompts, reference media | Feature-dependent |
| json2video | Final video assembly | Scenes, audio, captions | Mandatory |
| Pexels | Stock footage search | A topic-derived search query only (which may include a personal name if one is in the topic) | Mandatory |
| Pixabay | Stock footage search (second free source) | A topic-derived search query only (which may include a personal name if one is in the topic) | Feature-dependent |
| Resend | Transactional email | Account-holder email, video status | Mandatory |
| Sentry | Error diagnostics | Request metadata; customer content excluded by configuration | Mandatory |
Not sub-processors for your content
The following act for our own controller-side purposes — billing records, security and anti-abuse, support, and consent-gated analytics — and do not process Customer Data on a business customer's behalf: Stripe (payments), PostHog (product analytics), Meta and TikTok (advertising measurement), Microsoft Clarity (session replay), Flowsery (AI session replay), Google Tag Manager (tag delivery, consent mode denied by default), Crisp (in-app support chat), Loops (contact records and lifecycle email), Cloudflare (Turnstile bot check on sign-up/sign-in) and Fingerprint (device intelligence used to detect repeat and automated signups claiming free credits) and Castle (behavioural and email intelligence scored on email/password sign-up; receives the sign-up email address, IP address and browser headers). They are covered in the Privacy Policy, not in this list.