Sub-processors

Last updated: April 2026

VideoToReels engages the third parties listed below as sub-processors to operate the service. Each is bound by a data-processing agreement that requires equivalent confidentiality, security, and data-protection commitments to the ones we make to you. We will give 30 days’ notice on this page before adding or replacing a sub-processor that processes personal data.

How to read this list

  • Required sub-processors are fundamental to the service; the product cannot run without them.
  • Optional sub-processors are engaged only for the specific feature listed and only when that feature is enabled.
  • We never sell Customer Data and never share it for advertising purposes.

Current sub-processors

Sub-processorPurposeData accessedLocationTier
Amazon Web Services (AWS)
Primary hosting provider. Runs the application servers, relational database (RDS PostgreSQL), object storage for media (S3), encryption-key management (KMS), and identity (Cognito).All Customer Data at rest and in transit. Encrypted with AWS-managed and customer-managed KMS keys.Ireland (eu-west-1)Required
Anthropic
Powers the in-product AI assistant: chat-based editing commands, caption generation, and B-roll prompts (Claude API).Prompts, editor state snapshots, and caption text submitted by the user when AI features are invoked. Inputs are not used by Anthropic to train models.United StatesRequired
OpenAI
Audio transcription via the Whisper API, used for auto-captioning of uploaded video.Audio extracted from videos the user uploads for captioning.United StatesOptional
Stripe
Subscription billing, payment processing, and invoice management.Billing email, plan tier, payment-method tokens (cards never touch our servers), invoice history.United States, IrelandOptional
Cloudflare (R2)
Object storage for media handled by the social-publishing worker (post images, videos, and rendered exports).Media files uploaded for scheduled posts.Global edge (configured for European processing)Optional
Resend
Transactional email delivery (account verification, password resets, scheduling alerts, billing receipts).Recipient email address, message content of system-generated emails.United StatesOptional
PostHog
Optional product analytics and feature-flag service. Disabled unless `NEXT_PUBLIC_POSTHOG_ENABLED=true`.Anonymous or pseudonymous event data (page views, feature usage). No raw post content or media.European Union (EU instance)Optional
Sentry
Optional application error monitoring. Disabled unless `NEXT_PUBLIC_SENTRY_ENABLED=true`.Stack traces, error context, and limited request metadata when an exception occurs. PII is scrubbed where detected.United States, European UnionOptional
Pexels
Stock photo and video search inside the video editor. Requests are made directly from the browser using a public API key.Search queries the user types into the in-editor stock-media browser. No user identifiers are sent.GermanyOptional

Social platform integrations

VideoToReels also acts on the user’s behalf with the social platforms a user chooses to connect (currently: YouTube, Instagram, Facebook, Threads, TikTok, X (Twitter), LinkedIn, Pinterest, Discord, Slack, and others listed inside the product). These platforms are not sub-processors in the GDPR sense: the user authorises VideoToReels to send data to them, and the user maintains a direct controller relationship with each platform under that platform’s own terms.

Notification of changes

When we plan to add a new sub-processor or replace an existing one, we update this page at least 30 days before the change takes effect. Customers on a paid plan can subscribe to change notifications by emailing security@videotoreels.com. Customers who object to a new sub-processor may terminate their subscription per the Terms of Service.

Questions

For data-protection or sub-processor questions, contact security@videotoreels.com. For general support, see our support page.

© 2026 VideoToReels. All rights reserved.