Legal · Subprocessors
Subprocessor list
These are the third parties that may process personal data on our behalf when providing GetReelCom. This page is the authoritative list referenced by our Data Processing Agreement; changes are announced at least 14 days in advance.
Current subprocessors
| Subprocessor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Render Services, Inc. | Application and website hosting | USA (entity); services hosted in the EU — Frankfurt, Germany | Standard Contractual Clauses; EU hosting region |
| Supabase, Inc. | Database, authentication and file storage | USA (entity); project hosted in the EU — Paris, France | Standard Contractual Clauses; EU hosting region |
| Google LLC / Google Cloud | AI generation (text, image and video) and Google sign-in | USA / global | EU–US Data Privacy Framework; Standard Contractual Clauses; paid API terms — no training on submitted content |
| Microsoft Corporation | Microsoft sign-in (work, school and personal Microsoft accounts) | USA / global | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Google Ireland Ltd | Web analytics (Google Analytics 4): which channels bring visitors and what they use, only with the visitor's Statistics consent; advertising features and Google Signals off, 14-month retention, no website addresses or email addresses sent | Ireland (entity); processing in the EU and USA | EU–US Data Privacy Framework; Standard Contractual Clauses; Google Ads Data Processing Terms |
| Attio Ltd | Customer relationship management: the name and email address left in the agency-deck form on the pricing page, and our follow-up with those prospects | United Kingdom (entity); data may be processed outside the EEA | UK adequacy decision; Standard Contractual Clauses / UK Addendum |
| Cloudflare, Inc. | Network in front of the website, app and API (DNS, proxy, content delivery), bot protection (Turnstile) on the start form, and cookieless visit counts; processes IP addresses and technical request data in transit | USA (entity); global network, EU points of presence | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Sendinblue SAS (Brevo) | Sending the emails about your account, starting with the welcome email at sign-up; receives the account's email address and first name | France (entity); data hosted in the EU | EU entity; EU hosting region |
Planned
Stripe Payments Europe, Ltd. (Ireland; part of Stripe, Inc., USA) will process payments for paid plans — card details go to Stripe directly and never reach our servers. Transfer safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses. Stripe moves to the list above before the first payment is processed, announced in line with the notice period below.
Changes and objections
We add or replace subprocessors by updating this page and notifying account holders by email or in the app at least 14 days before the change takes effect. Customers may object on reasonable data-protection grounds as described in art. 5 of the DPA. Questions: [email protected].