Service providers
English · Français · Português do Brasil
We use service providers for hosting, accounts, payments, communications, analytics and production services. This list supplements our Privacy Policy and identifies recipients, processing locations and purposes.
Recipients outside your country, what they receive and why. Information is sent over an encrypted network connection when you use the related feature; each recipient keeps it as long as needed for its purpose under its own retention rules, and our own retention is described in section 7.
- Cloudflare, Inc. (United States, with servers worldwide; contact): website hosting and security, waitlist storage, the OpenMontage Studio connection gateway and temporary storage of credit-funded inputs and outputs. Receives connection data, account identifiers and the files of credit-funded jobs. It also handles the feedback information described in section 5.
- Supabase, Inc. (United States; contact): sign-in and account database. Receives account, profile, agreement, device, job and credit records. It also handles the feedback information described in section 5.
- Stripe, Inc. and its affiliates (United States and Ireland; contact): payments, tax and, where it sells to you as merchant of record, the purchase itself. Receives billing details and purchase records.
- OpenAI OpCo, LLC (United States; contact): content-safety checks and credit-funded generation and transcription. Receives the prompts, images, narration text and recordings of those jobs.
- Features & Labels, Inc. (fal) (United States; contact): credit-funded image, video and music generation, passing each request to the model supplier for the selected operation. Receives the prompts and images of those jobs.
- PostHog, Inc. (United States; contact): storage of OpenMontage Studio production activity and creative text where that collection is enabled for your account. Receives the activity and filtered text described in section 2 with an OpenMontage account identifier; never images, video or audio.
- Google LLC (United States; contact): website analytics if enabled, YouTube videos you choose to play, email, and Google sign-in if you use it.
- Resend, Inc. (United States; contact): verification and account emails. Receives your email address. It also receives feedback report text and a private viewer link, and the verified reply address only when follow-up is enabled.
- GitHub, Inc. (United States): the website’s star counter. Receives connection data.
International transfers
We are based in the United States and offer the Services in supported countries, so your information is transferred to and processed in the United States, and by some providers in other countries where they operate. Privacy laws there may differ from those where you live. The United States has no single national privacy law; personal information is protected by sector-specific federal laws, Federal Trade Commission enforcement against unfair and deceptive practices, and state privacy laws. Where the law requires a transfer safeguard, we rely on the recipient’s certification under the EU-US Data Privacy Framework and its UK and Swiss extensions where available, or on standard contractual clauses, including the UK addendum. Published arrangements include those of Cloudflare, Google Analytics and Google Workspace. Contact us for a copy of the safeguards that apply to your information.
Providers you connect through your own accounts process information under their agreements with you and may also transfer it internationally. You can avoid a feature-specific transfer by not using that feature. Transfers necessary to operate your account are required to provide the Services.