CreatorsPA Subprocessors
Last updated: 1 August 2026
Mangroove FZ-LLCLicense no. 47035430
FDBC5835
Compass Building
Al Shohada Road
Al Hamra Industrial Zone-FZ
Ras Al Khaimah
United Arab Emirates
info@creatorspa.io
CreatorsPA uses a limited number of third-party service providers to operate the platform and provide features requested by our users.
Where these providers process personal data on our behalf, we require them to protect that data in accordance with applicable data protection law and appropriate contractual safeguards.
Our Data Processing Agreement is available at: https://www.creatorspa.io/en/dpa
Current Subprocessors
| Provider | Purpose | Data that may be processed | Primary processing location |
|---|---|---|---|
| Supabase | Database, authentication and file storage | Account data, conversations, content, generated files, connected-channel information, OAuth tokens and other data stored in the CreatorsPA account | European Union — primary CreatorsPA database and storage in Frankfurt, Germany |
| Vercel | Application hosting and delivery | Technical request data required to deliver and secure the Service, including IP addresses and request information | Global infrastructure, including the United States |
| Resend | Transactional email | Email address and the content of transactional emails such as account, security and service notifications; account data, email metadata, logs and API records | Emails may be sent through the Ireland region; account data, logs and API records are stored in the United States |
| Anthropic | AI text generation | Prompts, recent conversation context and other content submitted when you actively use a feature powered by Anthropic | United States |
| OpenAI | AI text and image generation | Prompts, text, images and other content submitted when you actively use an OpenAI-powered feature | United States and other locations used by OpenAI under applicable transfer safeguards |
| SocialCrawl | Public social media data retrieval | When you research a channel or topic, we send a query — such as a channel name or keyword — together with the platform and time range you choose. We send no account data and no content of yours. SocialCrawl returns publicly available platform data. Trend results are aggregated without the author's identity. Creator search and networking results keep public profile details such as a handle, display name and post caption so that a relevant comment can be drafted; networking records are deleted automatically after 14 days, and creator searches are kept with your saved search until you delete it or your account. | Outside EU/EEA (under transfer safeguards) |
| fal.ai | AI image and video generation | Prompts, images, face photos and other media submitted when you actively use a fal.ai-powered generation feature | United States |
| ElevenLabs | AI voice generation | Text, audio, voice recordings and related information submitted when you actively use a voice-generation feature | United States and other locations used by ElevenLabs under applicable transfer safeguards |
| Google Workspace | Support inbox (incoming email only) | Messages you choose to send to our address, including support requests, screenshots and anything else you include. Email that CreatorsPA sends to you is delivered through Resend, not through this mailbox. | Google infrastructure |
| Account authentication and connected Google services | Your name, email address and unique Google account identifier. We do not receive or store your Google profile picture. Signing in with Google asks for identity only; permission to reply to YouTube comments is requested separately when you connect a channel, and permission to create calendar events separately at your first reminder. Gmail and Google Drive are never requested. | Google infrastructure |
AI Providers
CreatorsPA does not send your content continuously to AI providers. Your content is sent to an AI provider only when you actively choose to use a feature that requires that provider. Our AI providers are contractually required to process data for the purpose of providing the requested service and are not authorised by CreatorsPA to use your content to train their general AI models. Some AI providers may retain inputs or outputs temporarily for security, abuse prevention or service-protection purposes in accordance with their applicable contractual terms. Files generated for you — images, video and voice — are downloaded into our own EU storage as soon as they are produced. We do not store links to an AI provider's servers, so your content does not depend on a provider link remaining available.
International Data Transfers
CreatorsPA's primary database and file storage are located in the European Union. Some subprocessors are located outside the EU/EEA, including in the United States, and authorised CreatorsPA personnel may access production systems from the United Arab Emirates where necessary. Where personal data is transferred outside the EU/EEA or UK and an adequate level of protection does not otherwise apply, CreatorsPA uses appropriate transfer safeguards as required by applicable law, including the European Commission's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum.
Connected Platforms
Services that you choose to connect to CreatorsPA, such as Instagram, Facebook, YouTube and Google Calendar, are not necessarily subprocessors of CreatorsPA. Those platforms may process information under their own terms, privacy policies and legal responsibilities. CreatorsPA only accesses a connected platform when you authorise the connection or request the relevant functionality. For example:
- continuing with Google asks for YouTube and calendar permissions in the same consent screen, and you can see exactly what is requested before you accept;
- adding a further channel later asks only for YouTube permission;
- Google Calendar is used only when you request that CreatorsPA create an event, and we never read your existing calendar; and
- disconnecting a social channel stops CreatorsPA's ongoing access to that channel.
Payment Processing
Paddle is not listed as a CreatorsPA subprocessor for payment data. Paddle acts as merchant of record for CreatorsPA purchases and handles payment information under its own applicable terms and privacy responsibilities. CreatorsPA does not receive or store your card number, bank details or payment credentials. We receive only limited non-sensitive subscription information required to manage your CreatorsPA access, such as a Paddle customer or subscription identifier, plan, subscription status and renewal date.
Changes to Subprocessors
We may add, replace or remove subprocessors as CreatorsPA develops. The current list will always be maintained on this page. Where required by applicable data protection law, we will provide at least 30 days' advance notice before a new or replacement subprocessor begins processing personal data on our behalf. Notice may be sent to the email address associated with your CreatorsPA account and will direct you to the updated version of this page. If you have reasonable and documented concerns relating specifically to data protection, you may object during the notice period by contacting: info@creatorspa.io We will review the objection in good faith and, where reasonably possible, attempt to resolve it in accordance with our Data Processing Agreement.
Questions
If you have questions about our subprocessors, international data transfers or how CreatorsPA handles personal data, contact:
Mangroove FZ-LLCLicense no. 47035430
FDBC5835
Compass Building
Al Shohada Road
Al Hamra Industrial Zone-FZ
Ras Al Khaimah
United Arab Emirates
info@creatorspa.io