Effective date: October 25, 2026. Version: 1.0.
We use the providers below to run the Services. We update this list at least 30 days before adding or replacing a provider that processes Customer Data or personal data on our behalf, and send notice to account emails as described in the Data Processing Addendum.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Stripe, Inc. and affiliates | Card payments, checkout, creator onboarding, identity verification, tax forms, payouts | Payment and billing data, payout and identity data, tax information, wallet identifier, creator identifier | United States |
| Google LLC | Sign-in with Google | Email, account identifier, verification status | United States and other countries |
| GitHub, Inc. | Sign-in with GitHub | Email, account identifier, verification status | United States |
| Apple Inc. | Sign in with Apple | Email (which may be a private relay address), account identifier | United States and other countries |
| Amazon Web Services (Amazon SES) | Transactional email, including one-time codes | Email address, message content | United States (us-east-1) |
| Cloudflare, Inc. | Bot and abuse protection on the public report form and the sign-in pages (Cloudflare Turnstile) | IP address, browser and device signals of a visitor who loads a protected page | United States (us-east-1) |
| Amazon Web Services | Hosting of application, database, cache, queue and object storage | All service data | United States (us-east-1) |
| Amazon Web Services (CloudWatch and X-Ray) | Operational traces and logs | Call metadata, identifiers | United States (us-east-1) |
Creators are not subprocessors. They receive tool-call content because a developer selects their tool.