The third parties CreatifyHQ relies on to deliver the service, what each one does, and what data it receives.
Last updated: 11 September 2026
CreatifyHQ acts as a processor of the personal data you put into the platform, and you remain the controller of it. To run the service we use a small number of carefully chosen sub-processors. Every one of them is listed below — this page is the complete list.
Each sub-processor receives only the data it needs to perform its function. We do not sell personal data, and we do not share it with anyone outside this list for advertising or profiling.
| Sub-processor | What it does | Data it receives | Location |
|---|---|---|---|
| Railway | Cloud hosting, application runtime and the PostgreSQL production database | All account and content data | United States |
| Cloudflare | Object storage (R2) for generated media, CDN delivery and DNS | Generated and uploaded media assets | Global |
| Stripe | Subscription billing and payment processing | Name, email, billing identifiers. Card details are handled entirely by Stripe and are never stored by CreatifyHQ. | United States / Global |
| Meta Platforms | Publishing to Facebook, Instagram and Threads; reading Page insights, comments and messages you have authorised | Social account identifiers, access tokens, and the content you choose to publish | United States / Global |
| Anthropic | AI generation of written content | Prompts and the content submitted for generation | United States |
| OpenAI | AI generation of written and visual content | Prompts and the content submitted for generation | United States |
| ElevenLabs | AI voice generation for video and audio features | Scripts and voice samples you submit | United States |
| Zernio | Fallback OAuth connection broker for social platforms | OAuth identifiers and tokens for connected accounts | Global |
| Email delivery — Brevo, MailerSend, Resend, Amazon SES, SendGrid | Transactional and notification email (verification, password reset, alerts). Providers are used as a fallback chain. | Name and email address | European Union / United States |
| GitHub | Source-code hosting for the CreatifyHQ platform | No customer content is stored in the repository | United States |
When you connect a social account, you authorise CreatifyHQ to act on that account on your behalf. Those platforms — Facebook, Instagram, Threads, X, LinkedIn, TikTok, YouTube and others you choose — receive the content you publish through us and are governed by their own terms and privacy policies. Disconnecting an account in Connections revokes our access to it.
Several sub-processors are located in the United States. Where personal data of individuals in the European Economic Area or the United Kingdom is transferred, we rely on the transfer mechanisms offered by those providers, including Standard Contractual Clauses where applicable.
Before a sub-processor is engaged we assess its security posture and, where it processes personal data, put a data processing agreement in place. Sub-processors are reviewed at least annually as part of our information security programme.
We will update this page before a new sub-processor begins processing customer personal data. If you would like advance notice of changes, email us at the address below and we will add you to the notification list.
If you have a question about a sub-processor, or wish to object to a new one, contact us at privacy@creatifyhq.com. See also our Privacy Policy, Data Processing terms and GDPR commitments.