Subprocessors
Last Updated: July 9, 2026
This page identifies third parties Shotro inc. expects to engage to process customer personal data when providing its paid AI creative platform. It supports the Data Processing Addendum. Actual providers and regions can depend on the services a customer enables and its configuration.
Launch control: no generative model or generative API provider may receive production customer data until Shotro has completed vendor review and added that provider to this page with its legal name, purpose, data categories, and processing locations.
Infrastructure and Service Providers
| Provider | Purpose | Data involved | Processing locations |
|---|---|---|---|
| Google LLC / Google Cloud | Cloud hosting, infrastructure, networking, storage, logging, and related platform services. | Account, project, content, usage, and technical data according to the deployed services. | United States and any cloud region selected by Shotro or the customer. Exact service locations must be verified in the relevant Google Cloud configuration before production use. |
| Supabase, Inc. | Managed database, authentication, storage, and backend platform services. | Account, authentication, project, collaboration, content, and technical data according to configuration. | United States or the project region selected during deployment. The production project region must be verified before customer data is processed. |
| Resend, Inc. | Transactional and service email delivery, including account and collaboration messages. | Name, email address, message content and metadata, delivery and engagement events. | United States and other locations used by Resend and its infrastructure providers, subject to Resend’s then-current documentation and contract. |
| Stripe, Inc. and applicable affiliates | Payment processing, invoicing, subscription management, tax and fraud prevention. | Customer and billing identifiers, transaction information, and limited account data. Payment credentials are submitted to Stripe rather than stored directly by Shotro where Stripe-hosted collection is used. | United States and other countries where Stripe or its affiliates and service providers operate, as described in Stripe’s documentation and contract. |
Generative AI Providers
No generative AI provider is approved on this public launch-stage list. Shotro plans to use multiple generative APIs. Before any such provider receives production customer inputs, uploads, or outputs, this page will identify the provider and the applicable processing details. Customer content will not be used for provider or Shotro model training without separate affirmative opt-in consent and applicable contractual controls.
Analytics Is Separate
Google Analytics may process website visitor data as described in the Cookie Notice only after consent. It is not listed above as a customer-content subprocessor unless and until it processes customer personal data on Shotro’s behalf under the DPA.
Change Notifications and Objections
Shotro will update this page before a new subprocessor begins processing production customer personal data. DPA customers may request notice of changes by emailing privacy@shotro.ai with the subject “Subprocessor change notices” and the customer account or organization name.
A customer may object during the notice period on reasonable data-protection grounds by emailing privacy@shotro.ai and explaining the specific concern. The process and remedies in the DPA apply.
Contact
Questions about this list or a provider’s role may be sent to privacy@shotro.ai.