Sub-processors
Last updated: 2026-10-17
These are the third-party providers that may process personal data on behalf of our customers when they use Uplonic. The terms of their engagement are set out in our Data Processing Agreement. The social networks you connect, and AI applications you connect through MCP, are not on this list: you send data to them yourself, through your own account (DPA, section 4).
| Provider | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Servers, database and object storage for the Uplonic API | All account and workspace data, uploaded media, connected-channel data | Germany, Finland (EU) | Within the EU |
| Vercel Inc. | Hosting of the website and dashboard; cookieless usage statistics; routing of AI requests (AI Gateway) | Requests passing through the web app, aggregated usage events, the text sent for AI processing | USA, global edge network | EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Cloudflare, Inc. | Network proxy and TLS in front of the API; bot protection on public forms (Turnstile) | IP address and request metadata of API calls; browser signals of the bot check | Global network | EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Stripe Payments Europe, Ltd. | Card payments, subscriptions, customer portal | Name, email, billing address, payment details (Uplonic never sees card data) | Ireland (EU), USA | EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Billingo Technologies Zrt. | Issuing invoices and reporting them to the Hungarian tax authority (NAV) | Billing name, address, tax number, email, invoice items | Hungary (EU) | Within the EU |
| Resend, Inc. | Transactional and notification emails | Email address, name, the content of the email | USA | EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Google Ireland Ltd. / Google LLC | AI features (Gemini: AI assistant, post-text suggestions, clip selection); “Sign in with Google”; Google Analytics on the website | Text and statistics sent for AI processing; Google account email, name and picture at sign-in; website usage data | EU, USA | EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical error reports; secrets and tokens are masked before sending | Germany (EU) | Within the EU |
| RunPod, Inc. | GPU processing: clip analysis and video renderingonly when the clip or AI video feature is used | The media file being processed and its transcript | EU or USA data centres | Standard Contractual Clauses |
| ElevenLabs Inc. · Microsoft Corporation (Edge TTS) | Text-to-speech voice-overonly when the AI video feature is used | The text to be narrated | USA, EU | EU–US Data Privacy Framework and/or Standard Contractual Clauses |
Changes
We announce a new sub-processor at least 30 days in advance on this page and by email to workspace owners. If you have a data-protection objection, write to info@uplonic.com within that period.
