Anthyx← Privacy Policy

Sub-processor List

Last updated: 29 May 2026

Anthyx uses the following third-party services ("sub-processors") to deliver our platform. Each sub-processor has agreed to data processing terms consistent with GDPR requirements. We will notify customers of material changes to this list at least 30 days in advance.

Sub-processorPurposeData categoriesLocationSafeguard
StripePayment processing and subscription billingName, email, billing address, payment card details (tokenised)USA (EU data processed in EU via Stripe's infrastructure)Standard Contractual Clauses
Google (Gemini API)AI content generation — Strategist, Copywriter, and Reviewer agentsBrand guidelines, post content, audience dataUSAStandard Contractual Clauses
Anthropic (Claude API)Fallback AI content generation and vision tasksBrand guidelines, post content, image descriptionsUSAStandard Contractual Clauses
ResendTransactional email (OTP codes, billing receipts, notifications)Email address, email subject and bodyUSAStandard Contractual Clauses
Upstash RedisQueue management, session state, rate-limiting cacheSession tokens (encrypted), temporary job payloadsEU (Frankfurt) or USA depending on region selectionStandard Contractual Clauses
QdrantVector database for brand knowledge embeddingsBrand documents, tone guides, and brief text (vectorised)EUData Processing Agreement with Qdrant GmbH
Cloudflare R2Media asset and file storageUploaded images, videos, documents, and brand assetsGlobal CDN (data stored in selected primary region)Cloudflare Data Processing Addendum
SentryError monitoring and crash reportingStack traces, request metadata, anonymised user IDsUSA / EU (configurable per Sentry organisation)Standard Contractual Clauses
ApifyCompetitor social media data scraping for competitive intelligencePublic social media profile data for monitored competitorsEU (Czech Republic)Data Processing Agreement
TavilyWeb search for trend analysis and competitive researchSearch queries derived from brand industry and keywordsUSAStandard Contractual Clauses

To object to a new sub-processor addition, email privacy@useanthyx.com within 30 days of notification.