Subprocessors
These companies process personal data for us, only to provide Wonder Creator and only under written terms that require them to protect it. Providers marked “when connected” receive nothing unless that feature is switched on for the service, and AI providers receive only what you choose to work on — never to train their models.
| Provider | What for | Data | Where |
|---|---|---|---|
| Supabase | Database, sign-in and file storage | Account, profile, everything you create and upload | Region of our project (see notice) |
| Vercel | Hosting and delivery of the app | Request metadata (IP address, browser), logs | India (Mumbai) and global edge |
| Google (Gemini API) | CreativeMind AI and image generation, when connected | Only the material you choose to work on | United States / global |
| Anthropic | CreativeMind AI, when chosen as provider | Only the material you choose to work on | United States |
| LiveKit | Huddle voice and video, when connected | Live audio/video streams (not recorded by us), display name | Global |
| Stripe | Card and international payments, when connected | Payer name, email, payment details entered on Stripe's page | United States / global |
| Razorpay | Payments in India (UPI, cards, netbanking), when connected | Payer name, email, phone, payment details entered on Razorpay's page | India |
| GoDaddy | The mailbox that receives messages sent from the Contact page, when connected | The name, email address and message of whoever writes to us | Global |
| VirusTotal (Google) | Malware check of uploads, when connected | A file fingerprint (SHA-256 hash) only — never the file | Global |
We update this page before adding a new subprocessor. Transfers outside your country rely on adequacy decisions or Standard Contractual Clauses (GDPR), and are made only to countries not restricted under India’s DPDP Act.