Subprocessors

Last updated 21 October 2026

These are the service providers that process personal data for Reeltopus, which is run by Turncraft Private Limited. Each one acts on our instructions to run part of the service. The same list is in our Privacy Policy, and our Data Processing Addendum covers how we use them for customers.

Subprocessors
Provider	What it does	Personal data	Location	DPA
Vercel	Hosts the website and app, and counts page views (Web Analytics).	Everything the app handles passes through it; request logs with IP address and browser.	United States and global edge	Standard DPA, part of the provider's terms
Neon	Our database: accounts, projects, transcripts, clips and billing records.	Account details, transcripts, clips, posts, encrypted connection tokens, billing records.	United States (Ohio)	Standard DPA, part of the provider's terms
Cloudflare	Stores uploaded videos and exports (R2), runs our upload service, handles our DNS and forwards email sent to our addresses.	Uploaded videos and exports; emails sent to our addresses.	United States and global edge	Standard DPA, part of the provider's terms
Google Cloud	Runs the render worker that reads your videos, finds faces for reframing, and makes exports; Google sign-in.	Videos while they are rendered; name, email and picture for Google sign-in.	United States (Iowa)	Standard DPA, part of the provider's terms
Inngest	Runs background jobs (processing, exports, posting); job data passes through it.	Job details: ids, settings, and the text of edits and posts.	United States	Being confirmed
Resend	Sends our emails: sign-in links, notices, and waitlist news.	Email addresses and the emails we send.	United States	Being confirmed
Anthropic	Claude reads your transcripts to pick clips, write titles, apply chat edits and translate dubs.	Transcripts, clip titles and the edits you ask for.	United States	Standard DPA, part of the provider's terms
ElevenLabs	Turns speech into text, and makes dubbed and cloned voices when you ask for a dub.	The audio of your videos; voice samples for a clone, which is deleted after each dub.	United States and European Union	Being confirmed
Sarvam AI	Turns speech in Indian languages into text.	The audio of videos in Indian languages.	India	Being confirmed
Paddle	Our reseller and merchant of record: takes payments, handles tax and invoices, and holds your billing details.	Name, email, billing address and payment details.	United Kingdom, European Union and United States	Merchant of record, under its own terms

Vercel

What it does: Hosts the website and app, and counts page views (Web Analytics).
Personal data: Everything the app handles passes through it; request logs with IP address and browser.
Location: United States and global edge
DPA: Standard DPA, part of the provider's terms

Neon

What it does: Our database: accounts, projects, transcripts, clips and billing records.
Personal data: Account details, transcripts, clips, posts, encrypted connection tokens, billing records.
Location: United States (Ohio)
DPA: Standard DPA, part of the provider's terms

Cloudflare

What it does: Stores uploaded videos and exports (R2), runs our upload service, handles our DNS and forwards email sent to our addresses.
Personal data: Uploaded videos and exports; emails sent to our addresses.
Location: United States and global edge
DPA: Standard DPA, part of the provider's terms

Google Cloud

What it does: Runs the render worker that reads your videos, finds faces for reframing, and makes exports; Google sign-in.
Personal data: Videos while they are rendered; name, email and picture for Google sign-in.
Location: United States (Iowa)
DPA: Standard DPA, part of the provider's terms

Inngest

What it does: Runs background jobs (processing, exports, posting); job data passes through it.
Personal data: Job details: ids, settings, and the text of edits and posts.
Location: United States
DPA: Being confirmed

Resend

What it does: Sends our emails: sign-in links, notices, and waitlist news.
Personal data: Email addresses and the emails we send.
Location: United States
DPA: Being confirmed

Anthropic

What it does: Claude reads your transcripts to pick clips, write titles, apply chat edits and translate dubs.
Personal data: Transcripts, clip titles and the edits you ask for.
Location: United States
DPA: Standard DPA, part of the provider's terms

ElevenLabs

What it does: Turns speech into text, and makes dubbed and cloned voices when you ask for a dub.
Personal data: The audio of your videos; voice samples for a clone, which is deleted after each dub.
Location: United States and European Union
DPA: Being confirmed

Sarvam AI

What it does: Turns speech in Indian languages into text.
Personal data: The audio of videos in Indian languages.
Location: India
DPA: Being confirmed

Paddle

What it does: Our reseller and merchant of record: takes payments, handles tax and invoices, and holds your billing details.
Personal data: Name, email, billing address and payment details.
Location: United Kingdom, European Union and United States
DPA: Merchant of record, under its own terms

"Standard DPA" means the provider's data processing terms apply to our account as part of its terms of service. "Being confirmed" means we are confirming those terms with the provider. Transfers out of the EU and UK rely on the European Commission's standard contractual clauses and the UK addendum, or an adequacy decision.

When this list changes

We update this page before a new provider starts handling personal data. If your workspace has accepted our DPA, we email its owners 30 days before, so you can object. To ask about a provider, email privacy@reeltopus.com.

Change log

21 October 2026: Published this page, with the data each provider handles and where its DPA stands.
18 October 2026: First list in the privacy policy: Vercel, Neon, Cloudflare, Google Cloud, Inngest, Resend, Anthropic, ElevenLabs, Sarvam AI and Paddle.