We use the following service providers ("subprocessors") to deliver Contentrue. Each is bound by a written agreement requiring appropriate data protection. This list applies to our Privacy Policy and Data Processing Addendum. We will give customers at least 14 days' notice before adding or replacing a subprocessor that handles Your Content.
| Provider | What they do for us | Data involved | Location |
|---|---|---|---|
| DigitalOcean | Hosting of the application, database, queues and file storage on a server in London | All data in the Service | London, UK |
| Cloudflare | CDN, proxy and network security in front of our server | Request metadata (IP address, headers) and content in transit | Global network |
| Stripe | Subscription billing, payments and customer portal. Also acts as an independent controller for its own fraud-prevention and regulatory purposes. | Billing name, email, address, VAT number, payment details (held by Stripe) | US, EU |
| OpenAI | AI text, image and voice generation | Prompts, reference images and text to narrate; generated output | US |
| Google (Gemini API) | AI text, image and speech generation | Prompts, reference images and text to narrate; generated output | US |
| Anthropic | AI text generation and planning. Listed because it may be used. | Prompts, brand and recipe text; generated output | US |
| Resend | Transactional email (sign-in codes, invitations, notifications, receipts) | Recipient email address, name and message content | US |
| Sentry | Error monitoring | Error reports and technical data (such as IP address and browser), with content removed where possible | US |
| Meta Platforms (Instagram, Facebook APIs) | Platform API: publishing to and reading statistics from the accounts you connect, at your instruction | Account identifiers, tokens, content you publish, statistics, comments and messages where enabled | Only for accounts you connect |
| X Corp. (X API) | Platform API: publishing to and reading statistics from the accounts you connect, at your instruction | Account identifiers, tokens, content you publish, statistics | Only for accounts you connect |
Meta and X receive data because you instruct us to publish to your accounts, and act as independent controllers for what they hold under their own terms. Our local Turkish text-to-speech runs on our own server and involves no third party.
Transfers outside the UK
Where a provider processes UK personal data outside the UK without an adequacy decision, we rely on the UK-US data bridge where the provider participates, or on the IDTA or the UK Addendum to the EU Standard Contractual Clauses. Ask us at hello@contentrue.com for details.
Updates
To be told by email when this list changes, write to us at the address above and we will add you to the notification list.