Subprocessors
DeepRed LLC uses the service providers below to run DeepRed Connect, Creator Studio and the Connect API. Each one processes personal data only on our instructions, under a written contract that requires it to protect the data and to delete it when the work ends.
DeepRed Connect has not launched, so none of these providers processes creator data today. This is the list we plan to use at launch.
1. Subprocessors
| Provider | What it does for us | Personal data it processes | Where |
|---|---|---|---|
| Cloudflare, Inc. (United States) | Runs all our application code (Workers, Workflows, Queues, Durable Objects, Containers); stores files, raw platform responses, encrypted keys, audit records and encrypted disaster-recovery copies (R2); protects our sites (network and firewall); sends our email (Email Service) and routes the mail we receive (Email Routing) | Everything DeepRed Connect handles, while it is processed; stored platform data and media; wrapped encryption keys; email addresses and message content | Stored data: Cloudflare data centers in Eastern North America, with disaster-recovery copies and a second key store in Western North America (location hints, which Cloudflare treats as best effort). Code runs on Cloudflare's worldwide network: requests are received near the sender and background jobs can run in any Cloudflare data center, so data is processed briefly outside the United States while that work runs |
| PlanetScale, Inc. (United States) | Hosts our main PostgreSQL database, including its point-in-time backups | Account details, connection records, connected-account data, consent and deletion records | Amazon Web Services, us-east-1 region (Northern Virginia, United States) |
| Google LLC (Google Cloud Key Management Service) (United States) | Holds the master key that encrypts our data keys. Key management only | Our wrapped data keys and the internal reference numbers bound to them. No platform data, no tokens, no names or emails | us-east4 region (Northern Virginia, United States) |
2. Providers that are not subprocessors
These providers don't process creators' or customers' personal data on our behalf:
- Amazon Web Services. Hosts PlanetScale's infrastructure. It is PlanetScale's subprocessor, not ours.
- Code hosting and automated builds (GitHub). Holds source code and synthetic test data only. Production data is never copied to development.
- DNS (Cloudflare, on the same account). Holds DNS records only.
- The platforms you connect: Meta, Google (YouTube), TikTok, X, LinkedIn, Pinterest, Twitch, Snap, Bluesky and the income services. They send us your data when you connect and receive what you publish. Each is responsible for its own processing under its own terms and privacy policy. Google appears twice: as YouTube, a platform you connect, and as our key-management provider. The two are separate services under separate terms.
3. Changes
We update this page before a new subprocessor starts processing personal data. Customers under our data processing agreement get at least 30 days' notice and can object. Questions: privacy@deepred.app.