Subprocessors

Vercel

• Service provided: Application hosting and infrastructure
• Data processed: Application data, request data, metadata
• Processing location: Germany (EU region)
• International transfer safeguard: Not applicable (EEA processing)

Vercel provides the cloud infrastructure used to host and run the ClipLedger application.

Resend

• Service provided: Transactional email delivery
• Data processed: Email addresses and notification content
• Processing location: United States (where applicable)
• International transfer safeguard: Standard Contractual Clauses or other appropriate safeguards

Resend is used to send transactional emails such as invitations and account notifications.

Stripe

• Service provided: Subscription billing and payment processing
• Data processed: Billing identifiers, payment status, subscription information
• Processing location: United States and/or European Union
• International transfer safeguard: Standard Contractual Clauses or other appropriate safeguards

Stripe processes subscription payments and billing information.

Upstash

• Service provided: Rate limiting and caching infrastructure (Redis)
• Data processed: IP addresses and technical request identifiers used solely for abuse prevention and rate limiting
• Processing location: Germany (Frankfurt, EU region - eu-central-1)
• International transfer safeguard: Not applicable (EEA processing)

Upstash is used for request rate limiting and abuse prevention.

Database (Neon)

• Service provided: Database hosting (serverless PostgreSQL)
• Data processed: All application data including user accounts, campaign data, and related metadata
• Processing location: Germany (Frankfurt, EU region)
• International transfer safeguard: Not applicable (EEA processing)

Neon is used to store and manage the primary application database.

Cloudflare (R2)

• Service provided: Object storage and content delivery
• Data processed: User-uploaded files such as profile images (avatars)
• Processing location: Eastern Europe (EEUR region, EU)
• International transfer safeguard: Not applicable (EEA processing)

Cloudflare R2 is used to store and deliver user-uploaded content such as profile images.

Google

• Services provided: Authentication (Google OAuth) and YouTube API access
• Data processed: Authentication identifiers, account email addresses, and publicly available video metadata
• Processing location: Global infrastructure operated by Google
• International transfer safeguard: Standard Contractual Clauses or other appropriate safeguards

Google services are used for secure user authentication and for retrieving public YouTube video statistics.

Meta (Facebook and Instagram)

• Services provided: Authentication (Facebook Login) and Instagram Graph API access
• Data processed: Account identifiers, basic profile information, and media performance metrics (such as video views and insights)
• Processing location: Global infrastructure operated by Meta
• International transfer safeguard: Standard Contractual Clauses or other appropriate safeguards

Meta services are used for user authentication and for retrieving Instagram account data and media performance metrics.

TikTok

• Services provided: API access for retrieving basic profile information and the authenticated user's own video data
• Data processed: Account identifiers, display name, profile picture, video identifiers, and video performance metrics (such as view counts)
• Processing location: Global infrastructure operated by TikTok
• International transfer safeguard: Standard Contractual Clauses or other appropriate safeguards

TikTok services are used to retrieve basic profile information when users connect their accounts.