Subprocessors
- Version:
- 1.0
- Effective from:
- Last updated:
This list is part of the Data Processing Agreement: /dpa. It concerns customer campaign processing, not every provider used to operate our business.
1. Current subprocessors
- Supabase
- Supabase Pte. Ltd., Singapore: authentication, database, file and encrypted credential storage. Receives account, team, campaign, audience and lead records and files as our infrastructure processor, including as subprocessor for customer data. Core project data is hosted in our selected EU region; support, service metadata and subprocessors can involve other countries.
- Vercel
- Vercel Inc., United States: hosting, application execution and content delivery. Processes request and connection metadata and application data in transit and runtime as processor, including as subprocessor for customer campaigns. The application runtime uses Frankfurt. Global edge delivery, support and service operations are not limited to that runtime region.
2. Separate provider roles
Meta operates Instagram under its own platform relationship with the connected account operator. Payment, account email, necessary security/monitoring and our optional analytics/advertising are disclosed in the Privacy Policy: /privacy. They are not authorized to use customer campaign contents for those purposes and are not included here merely because they are service providers.
3. Changes and objections
The DPA requires at least 30 days’ advance notice to workspace admins for an addition or replacement, with the right to raise substantiated data-protection objections. Contact legal@kurostudio.io. This first customer edition applies from its effective date; it does not assert that historical internal acceptances were changed.