We engage the third-party sub-processors listed below to help provide the Service. Each is bound by data-protection obligations consistent with our Data Processing Addendum. Regions are indicative placeholders and must be verified against each provider’s current data-residency configuration before publishing.
Current sub-processors
| Sub-processor | Purpose | Processing region |
|---|---|---|
| Supabase | Primary PostgreSQL database and storage | Singapore (ap-southeast-1) [placeholder] |
| Vercel | Application hosting and edge delivery | Global / US [placeholder] |
| Anthropic | AI agent and assistant model inference | US [placeholder] |
| OpenAI | AI model inference and embeddings | US [placeholder] |
| Meta | Conversions API (server-side ad events) | US / EU [placeholder] |
| TikTok | Server-side ad conversion events | US / EU [placeholder] |
| Resend | Transactional email delivery | US [placeholder] |
| Cloudflare R2 | Object storage for uploaded media | Global [placeholder] |
| Railway | Background worker / service hosting | US [placeholder] |
| ElevenLabs | Text-to-speech voice generation | US [placeholder] |
Changes to this list
We may add or replace sub-processors as the Service evolves. Where required by the DPA, we will provide advance notice so customers can object on reasonable data-protection grounds. [Notice mechanism and objection window — placeholder to be confirmed with counsel.]