Subprocessors & service providers

This page summarizes third parties that may process personal data when you use the platform. It does not list invented company registration numbers. Full operational detail for staff is in the repository GDPR docs.

Template — pending counsel review. This page is a structured legal template for the distribution platform. Confirm which entity is controller/operator for this deployment before publishing. Do not treat draft wording as final advice.

See docs/privacy-regions.md § “US / TH registration workflow” and Admin → Legal registration checklist before production. Counsel review remains required.

Do not treat this list as a signed DPA register. Contract status is tracked internally until counsel confirms agreements on file.

Core infrastructure

  • Stripe — payments, Connect, invoices, webhooks
  • Bunny Stream — video storage and HLS delivery
  • Vimeo — alternate mezzanine storage and playback
  • Cloudflare — CDN / reverse proxy when used; optional Web Analytics / Zaraz (consent-gated analytics & marketing purposes)
  • Mail SMTP / API (MAILER_DSN) — transactional email
  • Application hosting and database (e.g. Plesk / VPS per deployment)

Optional channel & product integrations

Only vendors enabled for a deployment process data. Social, stock, news, membership, live, podcast, adult, and ads APIs apply when configured in Admin → Integrations.

  • Social publish APIs (YouTube, TikTok, Meta, X, LinkedIn, helpers) when configured
  • Analytics (GA4 / Plausible / Matomo / CF Web Analytics) only after analytics-category consent
  • Stock and news/editorial destinations when configured
  • Memberships, live, podcast, AVOD, and adult platforms when configured

Changes

Material changes to core processors will be reflected on this page. B2B customers may also receive notice under their contract.

Privacy regions · Impressum · Terms

Language English