01Current subprocessors
| Provider | What they do for us | Main location |
|---|---|---|
| Clerk | Sign-in, account security and sign-in emails (including Continue with Google) | United States |
| Only if you choose Continue with Google: confirms your Google account | Global | |
| Supabase | Database: accounts, credit balances, video and image jobs, settings | United States (North Virginia) |
| Cloudflare (R2 and network) | Private storage for uploaded images and finished videos; DNS and network security | Global |
| Railway | Application and video-worker hosting | United States (Virginia) |
| fal.ai and the model providers it runs (Kling, Google Veo and Nano Banana, ByteDance Seedance and Seedream, Alibaba Wan, Black Forest Labs FLUX, OpenAI GPT Image) | Generates your videos and images from your prompts and reference images | United States / other regions |
| Stripe | Payments, subscriptions, invoices, tax and fraud checks | United States / Ireland |
| Resend | Account and “video ready” emails | Japan (sending) / United States |
| Google (Analytics) | Anonymous visit statistics, only if you allow “Analytics” | United States |
| Microsoft (Clarity) | Page-use recordings and heatmaps, typed text hidden, only if you allow “Analytics” | United States |
| Ahrefs (Web Analytics) | Cookieless visit statistics, only if you allow “Analytics” | Singapore / United States |
02How we choose and protect
We only use providers that need the data to run SupaSwirl, and we give each the minimum it needs. Where data leaves your country, we rely on safeguards such as standard contractual clauses. Payment card details go directly to Stripe and never reach us. See the Privacy Policy for what we collect and your rights.
03Changes
We update this page before a new provider starts processing personal data, and change the “Last updated” date. For questions, email [email protected].