Sub-Processors
Last updated: March 1, 2025
Moduvo uses the following third-party sub-processors to provide and improve our Service. Each sub-processor is contractually bound to protect your data in accordance with our Privacy Policy and applicable data protection laws.
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, and backend infrastructure | Account data, user content, authentication tokens | EU (Germany) / US |
| Stripe | Payment processing and subscription management | Billing information, payment details, subscription status | US (with EU data residency) |
| OpenAI | AI language model processing | User content submitted for AI processing (not used for model training) | US |
| Anthropic | AI language model processing | User content submitted for AI processing (not used for model training) | US |
| Vercel | Web hosting and edge network | IP addresses, request metadata, cookies | Global (edge network) |
| Resend | Transactional email delivery | Email addresses, email content | US |
| PostHog | Product analytics (optional, consent-based) | Usage data, anonymized event data | EU (Germany) |
| Sentry | Error tracking and performance monitoring | Error logs, performance data, device metadata | US |
Supabase
Database, authentication, and backend infrastructure
Data: Account data, user content, authentication tokens
Location: EU (Germany) / US
Stripe
Payment processing and subscription management
Data: Billing information, payment details, subscription status
Location: US (with EU data residency)
OpenAI
AI language model processing
Data: User content submitted for AI processing (not used for model training)
Location: US
Anthropic
AI language model processing
Data: User content submitted for AI processing (not used for model training)
Location: US
Vercel
Web hosting and edge network
Data: IP addresses, request metadata, cookies
Location: Global (edge network)
PostHog
Product analytics (optional, consent-based)
Data: Usage data, anonymized event data
Location: EU (Germany)
Sentry
Error tracking and performance monitoring
Data: Error logs, performance data, device metadata
Location: US
Data Protection Measures
- All sub-processors have signed Data Processing Agreements (DPAs) compliant with GDPR requirements.
- For transfers outside the EEA, Standard Contractual Clauses (SCCs) or equivalent safeguards are in place.
- We regularly review and audit our sub-processors for compliance with our data protection standards.
- AI providers (OpenAI, Anthropic) are configured to NOT use your data for model training under our enterprise agreements.
Changes to Sub-Processors
We will update this page whenever we add or remove a sub-processor. Enterprise customers will be notified at least 30 days in advance of any changes to allow time for review.
Questions?
If you have questions about our sub-processors or data processing practices, contact us at privacy@moduvo.app.