Subprocessors
Create uses the companies below to help run the service. They handle personal data for us under contract. Our AI model providers receive the prompts and files you send to a tool so it can make your result. Which providers see your data depends on the tool and model you choose. The list changes as we add or remove tools and models.
Questions, or a request for our data processing terms: use our contact form. See also our Privacy Policy.
Draft: this list has not been reviewed by a lawyer. Rows marked Not switched on yet are set up in our code but do not run today. Analytics tools and marketing pixels only run after you accept them in our cookie banner. Where each company processes data depends on its own setup, so see its privacy policy for details.
| Vendor | Purpose | Data involved | Company based in |
|---|---|---|---|
| Vercel | Hosting, the AI Gateway that routes requests to most AI model providers, and website page-view and speed analytics (after you accept analytics) | Requests, prompts, files in transit, server logs | United States |
| Supabase | Sign-in, database and file storage | Account details, generation history, usage records, uploads, Output, notes, documents | United States. Data stored in North Virginia, United States |
| Stripe | Payments, subscriptions and the customer portal | Name, email, billing details, subscription status | United States |
| OpenAI | AI model provider | Prompts and files for the tool you choose | United States |
| AI model provider | Prompts and files for the tool you choose | United States | |
| Other AI model providers reached through the Vercel AI Gateway (Black Forest Labs, ByteDance, xAI, Kuaishou, Alibaba, MiniMax, Recraft, Topaz Labs and others as models are enabled) | AI model providers, used only when you pick their model | Prompts and files for the model you choose | Varies by provider |
| Sentry | Error monitoring, always on, without session replay | Technical error data, page, device details | United States |
| PostHog | Product analytics (after you accept analytics) | Page views, feature usage, device data | United States |
| Statsig | Feature flags and experiments, including session replay on the website (after you accept analytics). Not switched on yet | Anonymous ID, interaction data, session recordings | United States |
| Google Analytics | Website traffic analytics (after you accept analytics) | Cookie IDs, page views, device data | United States |
| Google Tag Manager and Microsoft Clarity | Website tag management and session recordings (after you accept analytics). Not switched on yet | Page views, clicks, device data, session recordings | United States |
| Advertising platforms (Meta, TikTok, Pinterest, LinkedIn, Reddit, X, Snapchat, Microsoft, Google Ads, Quora, Spotify, AdRoll, OpenAI Ads) | Ad measurement pixels on the website (after you accept marketing). Not switched on yet | Page views, device data, cookie IDs | Varies by company |