Sub-processors

Stripe

Purpose: Payment processing services

Data Processing Regions: United States, European Union

Transfer Safeguards: EU operations processed in-region; for transfers to the US, Data Privacy Framework participation and Standard Contractual Clauses with supplementary measures

Google (Gemini, Gemini text-to-speech, Lyria)

Purpose: For requests made through CrispDemo's server: narration text-to-speech from the narration text, music generation from a short music brief, and review of the finished video, which can show parts of your recordings and screenshots. Google does not receive your recordings, frames, or screenshots from CrispDemo

Data Processing Regions: Provider infrastructure; processing may involve international transfers

Data Usage: When you use your own Gemini API key, the desktop application sends requests directly to Google instead of through CrispDemo's server; your agreement with Google applies to that use.

Transfer Safeguards: Applicable Google data-processing and international-transfer terms depend on the configured Gemini service and processing location

Hetzner

Purpose: EU server hosting: API, PostgreSQL database, and website, for users outside North America

Data Processing Regions: European Union

Transfer Safeguards: EU-hosted processing; applicable contract and data-processing terms govern support and any ancillary transfers

InterServer

Purpose: US server hosting: API, PostgreSQL database, and website, for users in North America

Data Processing Regions: United States

Data Usage: InterServer publishes its Data Processing Agreement within its Terms of Service.

Transfer Safeguards: The provider publishes a Data Processing Agreement and an EU-U.S. Data Privacy Framework statement; applicability depends on the contracted service

Cloudflare

Purpose: DNS, edge proxying and security, TLS certificate DNS validation, and the country lookup used to choose a US or EU server

Data Processing Regions: Global edge network

Transfer Safeguards: Applicable data-processing and international-transfer terms depend on the configured Cloudflare services and account contract

Auth0

Purpose: Sign-in with Google, GitHub, Microsoft, Apple, or OpenAI accounts

Data Processing Regions: European Union (EU tenant)

Transfer Safeguards: Standard Contractual Clauses, EU data residency available

Mailgun

Purpose: Delivery of internal operational alerts to CrispDemo staff, which can include an account ID

Data Processing Regions: United States, European Union

Transfer Safeguards: Standard Contractual Clauses with supplementary measures