Feedova Subprocessors
Last updated: 22 October 2026
This page lists the providers that process personal data for Feedova. It forms part of our Data Processing Agreement (Annex 3) and supplements the Privacy Policy. Feedova is provided by Nabta LLC (United States), which accesses data from outside the European Union.
Statuses. "Active": the provider receives data today. "Being activated": planned; the provider does not yet receive any customer data; the activation date will be announced here.
Training. The last column summarizes what each provider's public policy says about the use of the data it receives to train or improve its own models. We are seeking to obtain terms from each of them that exclude this use; until that is the case, we say so here.
1. Hosting and infrastructure
| Provider | Role | Data | Location | Transfer safeguard | Use for its own models | Status |
|---|---|---|---|---|---|---|
| Render Services, Inc. (United States) | hosting of the application, the database and the files | all data of the Service | Frankfurt (Germany) | certified under the Data Privacy Framework (EU, United Kingdom, Switzerland); data processing agreement with Standard Contractual Clauses | not applicable (hosting provider) | active |
| Cloudflare, Inc. (United States) | domain name, network protection; later, storage of images and videos | IP addresses and connection data; later, brand files | global network; storage planned under European Union jurisdiction | certified under the Data Privacy Framework | not applicable | active (domain name); being activated (storage) |
| Google (Google LLC, United States, or Google Cloud EMEA Ltd, Ireland): Google Workspace | email for the Feedova team (@feedova.ai addresses) | emails you send us | United States and European Union | certified under the Data Privacy Framework; Standard Contractual Clauses | no, under the Google Workspace terms | active |
| Functional Software, Inc. (Sentry, United States) | error monitoring | IP address, technical identifiers, filtered request excerpts | European Union region (Frankfurt) | certified under the Data Privacy Framework; Standard Contractual Clauses | no | being activated |
| Plus Five Five, Inc. (Resend, United States) | automated emails (confirmation, invitations, password) | name, email address, email content | United States, sending possible from the European Union | Standard Contractual Clauses to be obtained | no | being activated |
| Stripe, Inc. (United States) and its companies: Sold through Link, LLC (merchant of record, United States); Stripe Payments Company, Stripe Technology Europe, Limited (Ireland), Stripe Payments Canada, Ltd., Stripe Payments Singapore Pte. Ltd., Stripe Payments Australia Pty Ltd. (payment processing) | merchant of record for payments (Stripe Managed Payments): checkout page, subscriptions, receipts and invoices, taxes, refunds, disputes, billing portal, Link account | name, email, billing address, country, status (business or individual), tax number, payment method (held by Stripe), amounts, subscription status | United States and European Union | Stripe, Inc. certified under the Data Privacy Framework; certification of Sold through Link, LLC not verified | no; for payment and Link account data, Stripe is an independent controller, not only a processor (privacy policy) | being activated (connected in test mode, no real payments) |
2. Artificial intelligence models
| Provider | Role in Feedova | Data | Location | Transfer safeguard | Use for its own models (public policy) | Status |
|---|---|---|---|---|---|---|
| Anthropic PBC (United States) | text, analysis, research, agents (Claude) | text and images sent (product descriptions, reviews, briefs, instructions) | United States | Standard Contractual Clauses (Anthropic's data processing agreement) | no: Anthropic states that it does not train its models on data received through its API | active |
| Google LLC (United States): Gemini API, paid tier; Sign in with Google | images (generation and editing); videos, as the last fallback for footage (Gemini Omni Flash model); sign-in to your account if you choose it | instructions, reference images (products, backdrops, faces, logos); for a video, the text of the request and the start and end images, which may show people; Google identity | United States and other countries | certified under the Data Privacy Framework; Standard Contractual Clauses | no for the paid tier, under the Gemini API terms (the free tier is never used with your data) | active |
| Higgsfield Inc. (United States) | realistic photos (Photo studio, Soul 2.0 model) and videos (footage, Kling 3.0 model), through its API for the online service | the text of the request (description of the photo or of the movement) and the reference or start images, which may show people (faces, bodies); these images are uploaded to Higgsfield's storage for the generation | United States (not specified) | cites the Data Privacy Framework and the Standard Contractual Clauses, without verified certification; no data processing agreement signed with Higgsfield to date | yes: its terms provide that content, inputs and outputs may be used to train its models; an enterprise offering excludes this, which we are seeking to obtain | active |
| HeyGen Technology Inc. (United States) | talking avatars, UGC-style videos | faces, voices, scripts | United States | certified under the Data Privacy Framework | yes, with the option to opt out by email; the enterprise offering excludes it | being activated |
| Eleven Labs Inc. (United States) | voice-over, voice cloning | text, voice samples | United States | Standard Contractual Clauses | yes, unless the opt-out setting is enabled in the account or under the enterprise offering; we will enable the opt-out | being activated |
| kie.ai (kie.ai Inc.) | generation of images (Nano Banana 2 model) and videos (Kling 3.0 model, as a fallback for footage), with Google as its fallback; never used to write your texts | the text of the request (image or movement instruction, which may include text from your ad to be displayed) and the reference or start images, which may show people | not stated | no information published; no data processing agreement signed with kie.ai to date | unclear: its terms mention improving its services; uploaded images deleted after 24 hours, generated images and videos kept for 14 days, logs for 2 months | planned: used when this service is activated; it receives nothing until then |
Sync Labs (lip-sync) is not used today. Its policy provides for training on the data it receives; if it were used, directly or through another provider, it would be added to this page beforehand.
3. Planned, not yet used for customer accounts
| Provider | Role | Status |
|---|---|---|
| Apify Technologies s.r.o. (Czech Republic) and redditapis | collection of public reviews, discussions and advertisements for market research | used internally only today; will be added to the table before any use for a customer |
4. Services you connect yourself
When you connect Google Drive, Meta (Facebook, Instagram), Slack or your online store, Feedova accesses them with the authorization you give, only for the functions you use. These services remain your providers, under their own terms; they are not Feedova's subprocessors.
5. Being notified of changes
We announce any addition or replacement of a subprocessor at least 30 days in advance, by email to the Owner of each Organization and on this page. To also receive these announcements at another address, write to privacy@feedova.ai with the subject line "Subprocessors".
History
| Date | Change |
|---|---|
| 21 October 2026 | first publication |
| 21 October 2026 | Stripe becomes the merchant of record for payments (Stripe Managed Payments, Sold through Link, LLC) |
| 22 October 2026 | Higgsfield: photos and videos through its API for the online service. kie.ai (planned, not yet activated): images and videos, whether or not the images sent show people (the "images without people" limit is lifted); no data processing agreement signed. Google: videos as the last fallback for footage (Gemini Omni Flash) |