← Home

CreatorsPA Subprocessors

Last updated: 1 August 2026

Mangroove FZ-LLC
License no. 47035430
FDBC5835
Compass Building
Al Shohada Road
Al Hamra Industrial Zone-FZ
Ras Al Khaimah
United Arab Emirates
info@creatorspa.io

CreatorsPA uses a limited number of third-party service providers to operate the platform and provide features requested by our users.

Where these providers process personal data on our behalf, we require them to protect that data in accordance with applicable data protection law and appropriate contractual safeguards.

Our Data Processing Agreement is available at: https://www.creatorspa.io/en/dpa

Current Subprocessors

ProviderPurposeData that may be processedPrimary processing location
SupabaseDatabase, authentication and file storageAccount data, conversations, content, generated files, connected-channel information, OAuth tokens and other data stored in the CreatorsPA accountEuropean Union — primary CreatorsPA database and storage in Frankfurt, Germany
VercelApplication hosting and deliveryTechnical request data required to deliver and secure the Service, including IP addresses and request informationGlobal infrastructure, including the United States
ResendTransactional emailEmail address and the content of transactional emails such as account, security and service notifications; account data, email metadata, logs and API recordsEmails may be sent through the Ireland region; account data, logs and API records are stored in the United States
AnthropicAI text generationPrompts, recent conversation context and other content submitted when you actively use a feature powered by AnthropicUnited States
OpenAIAI text and image generationPrompts, text, images and other content submitted when you actively use an OpenAI-powered featureUnited States and other locations used by OpenAI under applicable transfer safeguards
SocialCrawlPublic social media data retrievalWhen you research a channel or topic, we send a query — such as a channel name or keyword — together with the platform and time range you choose. We send no account data and no content of yours. SocialCrawl returns publicly available platform data. Trend results are aggregated without the author's identity. Creator search and networking results keep public profile details such as a handle, display name and post caption so that a relevant comment can be drafted; networking records are deleted automatically after 14 days, and creator searches are kept with your saved search until you delete it or your account.Outside EU/EEA (under transfer safeguards)
fal.aiAI image and video generationPrompts, images, face photos and other media submitted when you actively use a fal.ai-powered generation featureUnited States
ElevenLabsAI voice generationText, audio, voice recordings and related information submitted when you actively use a voice-generation featureUnited States and other locations used by ElevenLabs under applicable transfer safeguards
Google WorkspaceSupport inbox (incoming email only)Messages you choose to send to our address, including support requests, screenshots and anything else you include. Email that CreatorsPA sends to you is delivered through Resend, not through this mailbox.Google infrastructure
GoogleAccount authentication and connected Google servicesYour name, email address and unique Google account identifier. We do not receive or store your Google profile picture. Signing in with Google asks for identity only; permission to reply to YouTube comments is requested separately when you connect a channel, and permission to create calendar events separately at your first reminder. Gmail and Google Drive are never requested.Google infrastructure

AI Providers

CreatorsPA does not send your content continuously to AI providers. Your content is sent to an AI provider only when you actively choose to use a feature that requires that provider. Our AI providers are contractually required to process data for the purpose of providing the requested service and are not authorised by CreatorsPA to use your content to train their general AI models. Some AI providers may retain inputs or outputs temporarily for security, abuse prevention or service-protection purposes in accordance with their applicable contractual terms. Files generated for you — images, video and voice — are downloaded into our own EU storage as soon as they are produced. We do not store links to an AI provider's servers, so your content does not depend on a provider link remaining available.

International Data Transfers

CreatorsPA's primary database and file storage are located in the European Union. Some subprocessors are located outside the EU/EEA, including in the United States, and authorised CreatorsPA personnel may access production systems from the United Arab Emirates where necessary. Where personal data is transferred outside the EU/EEA or UK and an adequate level of protection does not otherwise apply, CreatorsPA uses appropriate transfer safeguards as required by applicable law, including the European Commission's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum.

Connected Platforms

Services that you choose to connect to CreatorsPA, such as Instagram, Facebook, YouTube and Google Calendar, are not necessarily subprocessors of CreatorsPA. Those platforms may process information under their own terms, privacy policies and legal responsibilities. CreatorsPA only accesses a connected platform when you authorise the connection or request the relevant functionality. For example:

Payment Processing

Paddle is not listed as a CreatorsPA subprocessor for payment data. Paddle acts as merchant of record for CreatorsPA purchases and handles payment information under its own applicable terms and privacy responsibilities. CreatorsPA does not receive or store your card number, bank details or payment credentials. We receive only limited non-sensitive subscription information required to manage your CreatorsPA access, such as a Paddle customer or subscription identifier, plan, subscription status and renewal date.

Changes to Subprocessors

We may add, replace or remove subprocessors as CreatorsPA develops. The current list will always be maintained on this page. Where required by applicable data protection law, we will provide at least 30 days' advance notice before a new or replacement subprocessor begins processing personal data on our behalf. Notice may be sent to the email address associated with your CreatorsPA account and will direct you to the updated version of this page. If you have reasonable and documented concerns relating specifically to data protection, you may object during the notice period by contacting: info@creatorspa.io We will review the objection in good faith and, where reasonably possible, attempt to resolve it in accordance with our Data Processing Agreement.

Questions

If you have questions about our subprocessors, international data transfers or how CreatorsPA handles personal data, contact:

Mangroove FZ-LLC
License no. 47035430
FDBC5835
Compass Building
Al Shohada Road
Al Hamra Industrial Zone-FZ
Ras Al Khaimah
United Arab Emirates
info@creatorspa.io