Service providers

This overview supplements the privacy policy and identifies services used for the available features. Not every service receives every task or complete project files. Processing depends on the feature used and selected settings; a task may involve several AI service providers. Payment and identity services may act as independent controllers for their own purposes. Privacy policy.

The agreed information and objection rights apply to chatbot operators: changes to automatically used processors are announced at least 14 days before use. Additional optional AI providers are listed here no later than their availability and are used only after the corresponding active selection.

Purpose: Platform hosting and storage

Data: Platform, account and project data

Processing: Germany

Safeguards: Processing under Art. 28 GDPR.

Purpose: Delivery, security and bot protection; optional AI processing after active selection

Data: IP addresses and technical connection data; selected AI processing also receives necessary inputs, file and tool context and responses

Processing: USA / worldwide; AI subprocessors include CoreWeave (USA) and Nebius BV (United Kingdom)

Safeguards: Processing under Art. 28 GDPR; EU standard contractual clauses for international transfers (Art. 46). Website services additionally use the EU-US Data Privacy Framework where applicable. AI content is not used for training or service improvement without express consent; we do not give that consent.

Purpose: Account, contractual and contact emails

Data: Email addresses and message content

Processing: Germany

Safeguards: Processing under Art. 28 GDPR.

Purpose: Payment processing and subscription management

Data: Name, email, payment identifiers and invoicing data

Processing: Ireland; international processing including the USA and India may occur

Safeguards: Processor or independent controller depending on the processing; the payment service’s privacy and contractual terms apply.

Purpose: Optional payment method

Data: Name, email, transaction identifiers and invoicing data

Processing: Luxembourg; international processing including the USA may occur

Safeguards: Processor or independent controller depending on the processing; the payment service’s privacy and contractual terms apply.

Purpose: Processing uploaded resources for requested editor features

Data: Selected files, editing settings and technical metadata

Processing: Germany

Safeguards: Processing under Art. 28 GDPR. Short-lived processing results are retained for a planned 24-hour period and then regularly cleaned up; stored tool projects follow the privacy policy’s retention rules.

Purpose: Optional sign-in and authorised repository and collaboration features

Data: Profile and account associations, permissions, search terms, authorised files, Git metadata and invitations

Processing: USA; access and processing outside the EU may occur

Safeguards: Independent controller or processor depending on the account and agreement. GitHub contractual and privacy terms apply.

Purpose: Optional AI processing after explicit selection

Data: Necessary inputs, conversation, knowledge and project context, tool results and responses; usage data for billing

Processing: The Netherlands; AI processing in France / Finland

Safeguards: Processing under Art. 28 GDPR. According to the provider, AI content is held in memory only during processing and is not used for training. Account and usage data have separate retention periods.

Purpose: Requested image/3D generation and texturing

Data: Necessary descriptions, selected reference images and editing settings

Processing: Processing outside the EEA, particularly the USA, may occur

Safeguards: The provider’s privacy notice describes purpose-based retention and further processing. Safeguards for international transfers include EU standard contractual clauses. Information about the conditions and safeguards applicable to your task is available through our privacy contact.

Purpose: AI processing of text and code

Data: Necessary inputs, conversation, knowledge and project context, tool results and responses

Processing: USA

Safeguards: Processing under Art. 28 GDPR; EU standard contractual clauses for international transfers (Art. 46).

Purpose: AI processing of text, code and images

Data: Necessary inputs, conversation, knowledge and project context, tool results and selected images and textures

Processing: Ireland / global processing including the USA

Safeguards: Processing under Art. 28 GDPR; EU standard contractual clauses for international transfers (Art. 46). Content in the paid AI services used is not used for training or product improvement. Security records may be retained. Older stored editing histories may remain for up to 55 days by default; earlier deletion is attempted after completion and saving.

Purpose: AI processing of text and code

Data: Necessary inputs, conversation, knowledge and project context, tool results and responses

Processing: USA

Safeguards: Processing under Art. 28 GDPR; EU standard contractual clauses for international transfers (Art. 46). Some selectable AI features require requests and responses to be retained for 30 days for security and abuse prevention, without training use. This is disclosed when selecting the feature.

Purpose: AI processing of text, code and images

Data: Necessary inputs, conversation, knowledge and project context, tool results and selected images and textures

Processing: USA

Safeguards: Processing under Art. 28 GDPR; EU standard contractual clauses for international transfers (Art. 46).

Purpose: AI processing of text, code and images; safety moderation

Data: Necessary inputs, conversation, knowledge and project context and selected images; necessary content excerpts for moderation

Processing: USA

Safeguards: Processing under Art. 28 GDPR; EU standard contractual clauses for international transfers (Art. 46). Transmitted content is not used for training under the applicable terms for the API services used.

Purpose: Optional AI processing of text and code according to selected settings

Data: Necessary inputs, conversation, knowledge and project context, tool results and responses

Processing: EU region Frankfurt; contracting party Singapore, parent company China

Safeguards: Processing under Art. 28 GDPR; EU standard contractual clauses for international transfers (Art. 46). EU data region; API inputs are not used for training. Optional use requires the corresponding selection.

Purpose: Optional rendering of requested logo/banner previews and exports, and editing and rendering of Creator Studio videos

Data: Necessary scene, text, selected image layers, settings and pseudonymous project/job identifiers; in Creator Studio the selected own clips and pictures, the voiceover and on-screen texts via time-limited single links

Processing: USA / worldwide; technical storage and processing outside the EEA may occur

Safeguards: Modal Data Processing Addendum with EU standard contractual clauses. Used only for actively requested renders. Temporary results are deleted after confirmed Cloud transfer, otherwise after 24 hours by the next hourly cleanup. The provider may retain its own technical records.

Purpose: Optional concept and script in Creator Studio

Data: Briefing and up to eight stills from own clips or pictures

Processing: EU (France)

Safeguards: Processing under Art. 28 GDPR. Used only for actively requested and confirmed runs.

Purpose: Optional voiceover in Creator Studio

Data: Voice text approved by the user

Processing: USA / UK

Safeguards: Processing under the ElevenLabs Data Processing Addendum with EU standard contractual clauses. Used only for actively requested and confirmed runs.

Access is limited to services needed to provide the requested feature and authorised personnel for operations, support and security review. Transfers outside the EEA follow the regions and safeguards stated for the relevant service. Where no adequacy decision applies, EU standard contractual clauses and any necessary additional measures are relevant. The EU-US Data Privacy Framework applies only where a relevant valid certification exists, not to every feature indiscriminately.

You can request information about the actual recipients and safeguards applicable to your processing, and copies where appropriate, at [email protected]. Storing our projects in Germany is not a general guarantee of European AI processing or zero retention. Your statutory rights remain.