Sub-processors
Last updated: April 2026
VideoToReels engages the third parties listed below as sub-processors to operate the service. Each is bound by a data-processing agreement that requires equivalent confidentiality, security, and data-protection commitments to the ones we make to you. We will give 30 days’ notice on this page before adding or replacing a sub-processor that processes personal data.
How to read this list
- Required sub-processors are fundamental to the service; the product cannot run without them.
- Optional sub-processors are engaged only for the specific feature listed and only when that feature is enabled.
- We never sell Customer Data and never share it for advertising purposes.
Current sub-processors
| Sub-processor | Purpose | Data accessed | Location | Tier |
|---|---|---|---|---|
Amazon Web Services (AWS) | Primary hosting provider. Runs the application servers, relational database (RDS PostgreSQL), object storage for media (S3), encryption-key management (KMS), and identity (Cognito). | All Customer Data at rest and in transit. Encrypted with AWS-managed and customer-managed KMS keys. | Ireland (eu-west-1) | Required |
Anthropic | Powers the in-product AI assistant: chat-based editing commands, caption generation, and B-roll prompts (Claude API). | Prompts, editor state snapshots, and caption text submitted by the user when AI features are invoked. Inputs are not used by Anthropic to train models. | United States | Required |
OpenAI | Audio transcription via the Whisper API, used for auto-captioning of uploaded video. | Audio extracted from videos the user uploads for captioning. | United States | Optional |
Stripe | Subscription billing, payment processing, and invoice management. | Billing email, plan tier, payment-method tokens (cards never touch our servers), invoice history. | United States, Ireland | Optional |
Cloudflare (R2) | Object storage for media handled by the social-publishing worker (post images, videos, and rendered exports). | Media files uploaded for scheduled posts. | Global edge (configured for European processing) | Optional |
Resend | Transactional email delivery (account verification, password resets, scheduling alerts, billing receipts). | Recipient email address, message content of system-generated emails. | United States | Optional |
PostHog | Product analytics: which features are used and where people get stuck. Nothing is collected until you accept analytics cookies, and accepting can be withdrawn at any time from Cookie Settings. | Pseudonymous event data (page views, feature usage) keyed to your account number — never your name or email address. Automatic click-capture and session recording are both switched off, so no post content, caption text or media reaches PostHog. | European Union (EU instance) | Optional |
Sentry | Application error monitoring. Session replay is not enabled. | Stack traces, error context, and limited request metadata when an exception occurs, together with your account identifier and email address so we can trace a reported problem back to your account. No post content or media. | European Union (Frankfurt) | Optional |
Pexels | Stock photo and video search inside the video editor. Requests are made directly from the browser using a public API key. | Search queries the user types into the in-editor stock-media browser. No user identifiers are sent. | Germany | Optional |
Social platform integrations
VideoToReels also acts on the user’s behalf with the social platforms a user chooses to connect (currently: YouTube, Instagram, Facebook, Threads, TikTok, X (Twitter), LinkedIn, Pinterest, Discord, Slack, and others listed inside the product). These platforms are not sub-processors in the GDPR sense: the user authorises VideoToReels to send data to them, and the user maintains a direct controller relationship with each platform under that platform’s own terms.
Notification of changes
When we plan to add a new sub-processor or replace an existing one, we update this page at least 30 days before the change takes effect. Customers on a paid plan can subscribe to change notifications by emailing security@videotoreels.com. Customers who object to a new sub-processor may terminate their subscription per the Terms of Service.
Questions
For data-protection or sub-processor questions, contact security@videotoreels.com. For general support, see our support page.
© 2026 VideoToReels. All rights reserved.