Every third party that processes data on our behalf, what it does, and where it is.
| Processor | What it does | What of yours it sees | Where |
|---|---|---|---|
| OpenAI | Image generation and content screening | Your uploaded creative and the generated outputs | United States |
| Cloudflare (R2) | Object storage for uploads and outputs | Your uploaded creative and the generated outputs | European Union (jurisdictional restriction) |
| Neon | Application database | Account, batch, plan and ledger records. No images | European Union |
| Vercel | Application hosting | Requests in transit | European Union edge, United States control plane |
| Clerk | Sign-in and account identity | Email address and authentication events | United States |
| Stripe | Payments and subscriptions | Billing details. We never see your card number | United States |
| Upstash | Job queue | Task identifiers. No images | European Union |
| Sentry | Error monitoring | Error traces. No images | European Union |
| Resend | Transactional email | Email address and message content | United States |
Files are stored under an EU jurisdictional restriction. Inference happens in the United States — sending a creative to OpenAI means sending it there, and no configuration on our side changes that.