Subprocessor List
PopTech Studio LLC uses the following third parties to help provide the Services. “Customer Content” means the brand and project materials, prompts, files, brand systems and deliverables a customer provides or that are produced for them. “Account data” means identity, billing and usage information about the customer’s own users and about visitors to our websites.
Subprocessors that may receive Customer Content
| Provider | Service | Location of processing | Data | Safeguard for EU/UK data |
|---|---|---|---|---|
| Hostinger International Ltd. | Virtual private server hosting for our interfaces, databases, integration servers and file storage; backups | Boston, Massachusetts, USA | All Customer Content and account data | Provider terms, with standard contractual clauses where applicable |
| OpenAI, L.L.C. | Large language model and embedding API (primary) | USA | Prompts, chat messages, extracted file text, brand model excerpts, retrieved public brand content | Business API terms (no training); provider data processing terms |
| Anthropic, PBC | Large language model API (fallback and high-fidelity tasks) | USA | Same as OpenAI, when routed | Commercial terms (no training); provider data processing terms |
| Perplexity AI, Inc. | Search-augmented model API for research and assessment tasks | USA | Same as OpenAI, when routed | Commercial API terms; provider data processing terms |
| ElevenLabs, Inc. | Voice synthesis and transcription for media production, and voice sessions where a customer uses a voice feature marked as such | USA | Scripts, voice samples supplied for a task, microphone audio and transcripts | Provider terms; provider data processing terms |
| Features and Labels, Inc. (fal.ai) | Image and video generation model gateway for media production | USA | Prompts, reference images and media supplied for a task | Provider terms |
| Replicate, Inc. | Hosted model API for image, video and audio generation | USA | Prompts, reference images and media supplied for a task | Provider terms |
| Luma AI, Inc. | Video generation API for media production | USA | Prompts and reference media supplied for a task | Provider terms |
Our services are model-agnostic. Requests are routed through a provider-neutral layer, so additional AI model providers, including providers of open-source models, may be added over time. A new provider is added to this list, and customers with a Data Processing Addendum are notified, before it receives Customer Content.
Subprocessors that receive account data only
| Provider | Service | Location | Data |
|---|---|---|---|
| Hostinger International Ltd. | Managed WordPress hosting and CDN for our websites; SMTP relay for transactional email | Hostinger data centers; CDN edges worldwide | Website account data, assessment registration details, contents of emails we send |
| Stripe, Inc. | Payment processing and subscription billing | USA | Billing name, email, payment method, transaction records |
| Google LLC | Google Analytics 4, Google Tag Manager, Google Fonts and Search Console on our websites | USA | Website usage data, IP address, browser data |
| HubSpot, Inc. | Website analytics and CRM on our websites, including form submissions | USA | Visit data and details submitted in our website forms |
| Intuit Inc. (Mailchimp) | Newsletter and marketing email | USA | Name, email, sign-up details and email engagement |
| Klaviyo, Inc. | Marketing email and website sign-up forms, where enabled | USA | Name, email, sign-up details and email engagement |
| Zapier, Inc. | Routing of form submissions to our own systems, where enabled | USA | Details submitted in our website forms |
| PostHog, Inc. | Product analytics for the dashboards we operate, where enabled | USA | Sign-in, sign-up and feature events tied to an account identifier |
| Functional Software, Inc. (Sentry) | Error monitoring, where enabled | USA | Error reports with technical context; secrets scrubbed |
| Zoom Video Communications, Inc. | Video meetings for brand reviews, onboarding and support | USA | Name, email, meeting details; recording where announced and agreed |
| Fireflies.ai Corp. | Meeting recording, transcription and notes, only where announced and agreed | USA | Meeting audio, transcript and summary |
| Meta Platforms, Inc. | Meta Pixel on our websites, where enabled, for advertising measurement | USA | Browser and device data, pages viewed, site actions; opt-out available under “Your Privacy Choices” |
| TikTok Inc. | TikTok Pixel on our websites, where enabled, for advertising measurement | USA | Browser and device data, pages viewed, site actions; opt-out available under “Your Privacy Choices” |
Infrastructure we operate ourselves (not third parties)
| Component | Notes |
|---|---|
| n8n workflow automation | Self-hosted on our own infrastructure. Handles wait list entries, form routing, notifications and internal workflows. No third-party processor involved |
| Redis | Runs on our own server. Holds short-lived rate-limit counters and one-time token identifiers only |
| PostgreSQL | Runs on our own server. System of record |
Not in the data path
Cloudflare is not currently used for our websites, dashboards, interfaces or integration servers. If a DNS change places a website behind Cloudflare’s proxy, Cloudflare, Inc. will be added to the account-data table before the change is made.
Change log
| Date | Change |
|---|---|
| 2026-09-26 | Initial list compiled from the deployed configuration of our websites and the services we operate |
This document was last updated on September 26, 2026. Prior versions are available on request.