Sub-Processors
The third-party services that process data for us, and what each of them processes.
Last updated: November 4, 2026
Moduvo uses the following third-party sub-processors to provide and improve our Service. Each sub-processor is contractually bound to protect your data in accordance with our Privacy Policy and applicable data protection laws.
Supabase
Database, authentication, and backend infrastructure
Data: Account data, user content, authentication tokens
Location: EU (Germany) / US
Stripe
Payment processing and subscription management
Data: Billing information, payment details, subscription status
Location: US (with EU data residency)
OpenAI
AI language model processing
Data: User content submitted for AI processing (not used for model training)
Location: US
Anthropic
AI language model processing
Data: User content submitted for AI processing (not used for model training)
Location: US
Vercel
Web hosting and edge network
Data: IP addresses, request metadata, cookies
Location: Global (edge network)
Resend
Transactional email delivery
Data: Email addresses, email content, contact form messages and attached images
Location: US
Google Ireland Ltd
Website analytics (Google Analytics, only with your consent)
Data: Usage data from moduvo.app, IP address (shortened), cookie identifiers, device and browser information
Location: EU (Ireland); transfers to the USA under the EU–US Data Privacy Framework
PostHog
Product analytics (optional, consent-based)
Data: Usage data, anonymized event data
Location: EU (Germany)
Sentry
Error tracking and performance monitoring
Data: Error logs, performance data, device metadata
Location: US
AI model providers for image, video and voice generation
Image, video and voice generation in the Moduvo platform
Data: Content sent for AI processing
Location: USA and other countries outside the EU
The full list of AI model providers is available to business customers on request as part of the data processing agreement.
Data Protection Measures
- All sub-processors have signed Data Processing Agreements (DPAs) compliant with GDPR requirements.
- For transfers outside the EEA, Standard Contractual Clauses (SCCs) or equivalent safeguards are in place.
- We regularly review and audit our sub-processors for compliance with our data protection standards.
- AI providers (OpenAI, Anthropic) are configured to NOT use your data for model training under our enterprise agreements.
Changes to Sub-Processors
We will update this page whenever we add or remove a sub-processor. Enterprise customers will be notified at least 30 days in advance of any changes to allow time for review.
Questions?
If you have questions about our sub-processors or data processing practices, contact us at privacy@moduvo.app.
Want AI working in your company?
A short call is enough to see what's worth building first and what it would take.
Prefer email? vit.bilinec@moduvo.app