1. How to Read This Page
This page lists third parties that may process Customer Personal Data, Customer Content, or service data so BuilderStudio can provide, secure, bill for, and support the service.
- Core subprocessors support the platform generally, such as hosting, backend infrastructure, storage, billing, and transactional email.
- AI and media subprocessors process prompts, files, media, outputs, or usage metadata only when you select the related model, provider, or feature.
- Customer-directed integrations and recipients process data only when you connect an account, import or export content, configure a webhook, or otherwise instruct the service to send data there.
- Locations describe the primary service or contracting location based on available vendor information. Some providers may process data in other regions where they or their subprocessors operate.
2. Core Service Subprocessors
| Name | Purpose | Data processed | Location | Website |
|---|---|---|---|---|
| Vercel Inc. | Frontend hosting, deployment, serverless and edge runtime, platform logs, and AI Gateway routing where enabled. | Account data, request metadata, workspace data in server requests, operational logs, and AI request data when AI Gateway is used. | United States / global | vercel.com |
| Convex, Inc. | Backend, database, realtime sync, auth/session infrastructure, server functions, and operational metadata. | Account data, workspace and canvas data, Customer Content, auth/session data, collaboration state, and usage records. | United States | convex.dev |
| Cloudflare, Inc. | R2 media storage, CDN/security services, custom domains, Workers/KV site-edge infrastructure, and optional browser rendering. | Uploaded and generated media, published-site assets, request metadata, custom-domain records, and URLs or screenshots if browser rendering is used. | United States / global | cloudflare.com |
| Stripe, Inc. | Payment processing, subscriptions, top-ups, invoices, tax and payment records, chargebacks, and billing support. | Billing identifiers, customer/payment metadata, transaction records, plan status, invoice data, and fraud or payment signals. | United States / global | stripe.com |
| Resend, Inc. | Transactional email, contact and waitlist messages, invite notices, account and workspace notifications. | Email addresses, message metadata, email content, delivery status, and related support data. | United States | resend.com |
3. AI and Media Subprocessors
These providers receive data only when the related model, generation provider, bring-your-own-key configuration, or media feature is used.
| Name | Purpose | Data processed | Location | Website |
|---|---|---|---|---|
| Google LLC / Gemini | Gemini text, image, and video generation. | Prompts, instructions, model parameters, reference files or media, generated outputs, and usage metadata. | United States / global | ai.google.dev |
| Vercel Inc. / AI Gateway | AI Gateway routing for selected third-party text and image models. | Prompts, parameters, files or media where supported, outputs, provider routing data, and usage metadata. | United States / global | vercel.com/ai-gateway |
| OpenAI, LLC | OpenAI text and image models made available through Vercel AI Gateway. | Prompts, parameters, files or media where supported, generated outputs, and usage metadata. | United States / global | openai.com |
| Anthropic PBC | Anthropic Claude models made available through Vercel AI Gateway. | Prompts, instructions, parameters, generated outputs, and usage metadata. | United States / global | anthropic.com |
| X.AI LLC | Grok text, image, and video generation. | Prompts, instructions, model parameters, reference files or media, generated outputs, and usage metadata. | United States | x.ai |
| Features & Labels Inc. / fal | Image and video generation, media transformation, and asynchronous generation jobs. | Prompts, model parameters, reference files or media, generated outputs, job status, and usage metadata. | United States / global | fal.ai |
| ElevenLabs, Inc. | Text-to-speech, speech-to-speech, sound effects, transcription helpers, and voice assets. | Text prompts, audio files, voice samples or clones, generated audio, transcription data, and usage metadata. | United States / global | elevenlabs.io |
4. Customer-Directed Integrations and Recipients
These services are not always subprocessors in the strict legal sense. They are included for transparency because data may be sent to them when you connect an account, import or export content, use OAuth, or configure a workflow destination.
| Name | Purpose | Data processed | Location | Website |
|---|---|---|---|---|
| Google LLC / Google Workspace | Google sign-in, Google Picker, Google Drive, Docs, and Sheets imports, exports, previews, and sync actions. | OAuth account data, selected files, document or spreadsheet content, file metadata, export content, and integration status. | Customer selected / global | workspace.google.com |
| GitHub, Inc. | GitHub OAuth, GitHub App installation, repository sync, source imports, source links, and draft pull request exports. | OAuth account data, installation identifiers, repository metadata, source files, branch and pull request data, and export content. | Customer selected / global | github.com |
| Customer-configured webhook and API endpoints | Workflow webhook-call nodes, API destinations, and other endpoints selected or supplied by the customer. | Payloads, headers, metadata, and content that the customer configures the workflow or API request to send. | Customer selected | Customer selected |
5. Changes to This List
We update this page when we add, remove, or replace a subprocessor that materially affects how BuilderStudio processes Customer Personal Data or Customer Content.
Where a signed data processing agreement applies, customers may receive notice and may object to new subprocessors as described in that agreement. Vendor websites may also identify their own downstream subprocessors, which are not repeated on this page.
For general privacy information, see our Privacy Policy. For service terms, see our Terms of Service.
6. Contact
For questions about this subprocessor list, contact legal@builder.studio.