Legal
Subprocessors
Effective October 10, 2026
Starter template. This document was drafted from common SaaS patterns and has notbeen reviewed by counsel. Review with a lawyer before relying on it for live transactions, disputes, or regulatory compliance. Flag any clauses that don't match how Varosity actually operates.
Varosity uses the following third-party subprocessors to provide its services. We will notify customers of material changes to this list at least 30 days in advance via email.
Infrastructure & Platform
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | User accounts, API keys (encrypted), credit balances, job history | USA (AWS us-east-1) |
| Vercel | Application hosting, edge network | HTTP requests (may include IP, auth headers) | Global CDN (US primary) |
| Cloudflare | R2 object storage for generated media (48h ephemeral) | Generated video, image, and audio files | Global (US primary) |
| Stripe | Payment processing, billing | Payment card data, billing addresses | USA + EU |
AI Model Providers
The following providers receive generation prompts (which may contain user-authored text) and return generated media. Varosity does not share user PII (email, account data, or API keys) with these providers.
| Provider | Models | Location |
|---|---|---|
| fal.ai | Veo 3.1, Kling 3.0 Pro, Seedance 4.5, OmniHuman 1.5, Pika 2.5, Lyria 2, FLUX.1 schnell, Ideogram V3, Recraft V3, Hunyuan, LTX | USA |
| Replicate | Kling 3.0 Pro (alt), FLUX 1.1 Pro, Nano Banana | USA |
| WaveSpeed | Luma Ray 2, Pika 2.2, Hailuo 02, Runway Gen 4 (Credits routing) | USA |
| MuAPI | Suno v4, Flux Dev, WAN Video Effects | USA |
| Imagen 4, Imagen 4 Fast | USA | |
| OpenAI | DALL-E 3, TTS-1, TTS-1 HD | USA |
| ElevenLabs | Multilingual v2, v3 Alpha, Music | USA + EU |
| Deepgram | Aura 2 (TTS) | USA |
| Cartesia | Sonic 2 (TTS) | USA |
| Fish Audio | speech-1.6 (TTS) | USA |
| xAI | Aurora image | USA |
| Stability AI | SD3.5 Medium, SD3.5 Large | USA / UK |
| Luma AI | Ray 3 | USA |
| MiniMax | Hailuo 02 | China / USA |
| HeyGen | Avatar 4.0, Video Translate | USA |
| D-ID | AI Presenter | USA / Israel |
Observability & Operations
| Subprocessor | Purpose | Data processed |
|---|---|---|
| Axiom | Structured log aggregation | User IDs, tool names, latency, error codes — no email or prompt content |
| Sentry | Error tracking | Stack traces, request paths — PII scrubbed per logging policy |
| Upstash | Redis rate limiting | Request metadata (IP, account ID, API key ID — no plaintext keys) |
| PostHog | Product analytics | Account ID, event name, model used, cost — no prompt content |
| Resend | Account and onboarding email | Email address, message content |
Changes to this list
We will provide at least 30 days' notice of any material changes to our subprocessor list. To object to a new subprocessor, contact support@varosity.ai within 14 days of the notification. Failure to object within that period constitutes acceptance.
Questions about this list or our data processing practices? support@varosity.ai