Filmion uses third-party service providers ("subprocessors") to deliver the platform. This page lists every active subprocessor as of the Effective Date above, along with a brief description of what they do, what data Filmion passes to them, and a link to their privacy policy.
Your use of the Filmion platform is governed by the Filmion Privacy Policy and the Filmion Terms of Service. This subprocessor list is incorporated by reference into the Privacy Policy at §5.
How this list works
The subprocessor list is maintained in Filmion's source code as a single source of truth and rendered to this page at build time. When Filmion adds a new subprocessor or removes one, this page updates with the next deploy.
Notice protocol. Per Privacy Policy §5, material changes that affect how your personal information is processed will be communicated by email to the address associated with your account at least thirty (30) days in advance, except where shorter notice is required to address an urgent security or operational issue.
Data minimization. Filmion passes only the data required for each subprocessor to perform its function. The "Data processed" column for each entry below describes the categories of data shared with that provider.
AI Generation Engines
| Provider | Service | Data processed | Privacy policy |
|---|---|---|---|
| Anthropic PBC | Claude AI generation engine (text reasoning + classification) | User prompts; brain pipeline context; first-frame thumbnails for classification | Policy ↗ |
| Google LLC | Gemini, Veo, and related AI generation engines | User prompts; reference images and videos when user uploads; aspect-ratio + duration parameters | Policy ↗ |
| fal.ai | Routing for Seedance, Kling, Hailuo, Flux, Ideogram, Recraft, Stable Diffusion engines | User prompts; reference images and videos when user uploads; engine-specific parameters | Policy ↗ |
| Black Forest Labs GmbH | FLUX image generation engine (direct integration) | User prompts; aspect-ratio and quality parameters | Policy ↗ |
| ElevenLabs Inc. | Music, sound effects, text-to-speech, speech-to-text engines | Text scripts; audio reference uploads when user supplies; voice-style parameters | Policy ↗ |
| OpenAI, L.L.C. | Whisper speech-to-text engine | Audio files when user requests transcription | Policy ↗ |
Infrastructure
| Provider | Service | Data processed | Privacy policy |
|---|---|---|---|
| Vercel, Inc. | Web hosting, edge functions, cron scheduling | HTTP request logs; IP addresses; user-agent strings; serverless function execution metadata | Policy ↗ |
| Cloudflare, Inc. | R2 object storage (generated assets + user uploads); Stream (Clips source video — uploaded or imported from a connected account — deleted 72 hours after import) | User-uploaded reference assets; generated video/image/audio outputs; account-id keyed paths; the source video a Clips run cuts from (72 h) | Policy ↗ |
| Supabase, Inc. | Database (accounts, generations, billing ledger, sessions) | Account records; generation history; billing transactions; director-session records; library assets metadata | Policy ↗ |
| Amazon Web Services, Inc. | Lambda function execution for Remotion video rendering | Edit Bay session timelines; generated clips for compositing; render output before R2 upload | Policy ↗ |
Authentication
| Provider | Service | Data processed | Privacy policy |
|---|---|---|---|
| Supabase, Inc. | Authentication and identity management (Supabase Auth) | Email addresses; passwords (hashed); OAuth provider tokens; session tokens; verified-email status | Policy ↗ |
Payment Processing
| Provider | Service | Data processed | Privacy policy |
|---|---|---|---|
| Stripe, Inc. | Payment processing | Payment card details; billing addresses; subscription metadata; transaction history; dispute records | Policy ↗ |
Email Delivery
| Provider | Service | Data processed | Privacy policy |
|---|---|---|---|
| Resend, Inc. | Transactional email (account confirmations, billing receipts) | Email addresses; email subject + body content; delivery status | Policy ↗ |
Monitoring & Caching
| Provider | Service | Data processed | Privacy policy |
|---|---|---|---|
| Functional Software, Inc. (Sentry) | Error monitoring and performance tracing | Error stack traces; HTTP request metadata; performance traces; user-id (NOT email or PII) when tagged | Policy ↗ |
| Upstash, Inc. | Redis caching for rate limits + availability monitoring | Rate-limit counters keyed by account-id; engine availability ping metadata | Policy ↗ |
Data residency and international transfers
The subprocessors listed above operate from various jurisdictions, including the United States, the European Union, the United Kingdom, and India. By using Filmion you consent to the transfer of your information to these jurisdictions per Privacy Policy §6.
Where required by applicable law, Filmion uses Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms with its subprocessors.
Questions
For questions about a specific subprocessor or about Filmion's data-processing arrangements, contact privacy@filmion.ai.
To file a data-subject rights request (access, correction, deletion, portability), see Privacy Policy §10.2.