Sub-processors
Last updated: May 21, 2026
UGCVideoApp engages the third-party sub-processors listed below to deliver the Service. We sign Data Processing Addenda with each vendor + remain liable for their acts and omissions per our customer DPA.
We notify customers 30 days in advance of any new sub-processor (per our DPA). To receive notifications, ensure your billing-contact email is current in your account settings.
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| AWS (S3 + CloudFront) | Object storage + CDN for rendered videos | Account id, workspace id, video content | us-east-1 + global edge |
| Stripe | Payment processing + customer billing | Email, billing address, card details (PCI scope: Stripe), customer id | US (multi-region) |
| HeyGen | Avatar video generation | Brief text, generated script, generated MP4 | US |
| OpenAI | Script generation, transcription (Whisper), content moderation | Brief text, generated script, generated transcription | US |
| Pexels | Stock video b-roll search | Search keywords only — no user PII | Multi-region |
| PostHog | Product analytics + funnel events | Email, workspace id, event metadata | EU (configurable) |
| Sentry | Error tracking | Error stacktraces, user id | EU |
| PagerDuty / Opsgenie | On-call paging | Internal alert payload only — no user PII | US / EU (Opsgenie) |
| Instatus / Statuspage.io | Public status page | None (admin-side only) | US |
| Neon (Postgres) | Managed primary database | All DB rows (PII included) | EU + US |
| Upstash (Redis) | Job queue + idempotency cache | Job payloads (workspace id, video id) | EU + US |
| Vercel | Frontend hosting | Request logs, IP | Global edge |
| Fly.io / Render | Backend hosting | Request logs, IP | Multi-region |
| Resend | Transactional email (verify, password-reset, deletion notices) | Email address, email subject + body | US |
Questions: privacy@example.com. DPAs are available on request.