StyTrix uses the third-party service providers listed below ("subprocessors") to host, run and support the platform. Each subprocessor only receives the data required for its purpose and is bound by contractual confidentiality and data-protection terms. This page is the public counterpart of our internal vendor register and is updated whenever a subprocessor is added, replaced or removed.
Infrastructure & platform
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel | Web application hosting, serverless API functions, scheduled jobs | All request data including account identifiers and IP addresses | United States (global edge network) |
| Convex | Primary database, file storage, backend functions | Account profile, projects, canvases, generated images and videos, credit and subscription records | United States |
| Cloudflare | DNS, object storage (R2), edge workers, custom domains, chat history storage | Published share pages, uploaded and generated media, chat history, encrypted backups | Global edge network; storage region as configured |
| Clerk | Authentication, sessions, multi-factor authentication, OAuth | Email address, name, password hash, sign-in IP address, MFA settings | United States |
| Stripe | Subscription billing, credit top-ups, marketplace payments, tax | Name, email address, payment method (card details are held by Stripe only), transaction history | United States / global |
| Liveblocks | Real-time canvas collaboration | Canvas content, user identifier and display name | United States / European Union |
| GitHub | Source code hosting and continuous integration | No customer personal data | United States |
AI generation providers
AI providers receive the prompts, images and videos you submit for generation together with generation parameters. They do not receive your name or email address. We select providers whose API terms state that submitted content is not used to train their models; where a provider has not yet confirmed this in writing we treat it as an open item in our vendor review.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic | AI agent, design mode and chat (Claude models) | Prompts, images and tool calls submitted for generation | United States |
| OpenAI | Text and image generation, embeddings | Prompts and images submitted for generation | United States |
| Google (Gemini API) | Image generation (Gemini models) | Prompts and images submitted for generation | United States / global |
| xAI | Video generation | Prompts and images submitted for generation | United States |
| Replicate | Custom model training and hosted image/video models | Prompts, training images you upload, resulting model weights | United States |
| fal.ai | Image vectorisation and hosted generation models | Images submitted for processing | United States |
| OpenRouter | Routing to additional language models | Prompts submitted for generation | United States (forwarded to the selected model provider) |
Analytics, communication & operations
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| PostHog | Product analytics and session replay | Usage events, page views, session recordings (passwords masked), and for signed-in users the account identifier, email address and name | United States |
| Langfuse | AI request tracing and cost monitoring | Prompts, model responses, account identifier | European Union / United States (as configured) |
| Resend | Transactional and marketing email delivery | Email address, name, email content | United States |
| HubSpot | Customer relationship management | Business contact details | United States / European Union |
| Telegram | Internal operational alerts | Internal alert messages only (no email addresses) | Global |
Changes to this list
We update this page before a new subprocessor starts processing personal data. Enterprise customers with a data processing agreement (DPA) receive notice of changes by email and may object within the period stated in their DPA.
Questions
For questions about our subprocessors, data protection requests or our DPA, contact us at
Email: privacy@stytrix.com