Subprocessors
Last updated: June 5, 2026
The following third parties process data on behalf of Ad Forge Studios, LLC to deliver the platform. Each is bound by a contractual obligation to process data only as needed for their service and to apply appropriate security safeguards. This list supplements our Privacy Policy.
We may update this list from time to time. Material additions (a new sub-processor receiving customer content) will be reflected here before the new provider goes live.
| Sub-processor | Purpose | Data received | Region | Privacy policy |
|---|---|---|---|---|
| Supabase | Managed Postgres database, authentication, file storage | Account records, all workspace data, generated content, uploaded media | United States (us-east-2) | supabase.com/privacy |
| Vercel | Application hosting, serverless functions, edge delivery | HTTP request metadata, function logs | United States (primary) | vercel.com/legal/privacy-policy |
| Stripe | Subscription billing and payment processing | Email, billing details, payment method (collected directly by Stripe), subscription state | United States; global processing per Stripe | stripe.com/privacy |
| OpenRouter | Gateway to large-language-model providers for text generation, intelligence analysis, ad copy, persona generation, Design Review | Prompts and inputs you submit (brand / product / persona / audience data, intelligence findings) | United States | openrouter.ai/privacy |
| Anthropic | Claude family LLMs reached through OpenRouter | Prompts and inputs as routed by OpenRouter | United States | www.anthropic.com/legal/privacy |
| Google Cloud (Gemini) | Gemini 3.1 Flash Image (Nano Banana 2) for AI image generation | Image-generation prompts and any reference / inspiration images you send | United States (Google Cloud) | policies.google.com/privacy |
| BrightData | Web data collection (SERP, Web Unlocker, Web Scraper API) for intelligence reports | Brand / product / URL inputs you specify for research; scrape-task metadata | United States / global per BrightData | brightdata.com/privacy |
| DataForSEO | Google Trends / search-demand data for intelligence reports | Brand, product, category and competitor keywords you specify for research | United States / global per DataForSEO | dataforseo.com/privacy-policy |
| Jina AI | Reader API — landing-page text extraction used by intelligence reports | URLs of public web pages submitted for extraction | United States / global | jina.ai/legal |
| Resend | Transactional email delivery (account, billing, report-ready notices) | Email address, message content | United States | resend.com/legal/privacy-policy |
| Sentry | Error monitoring and performance telemetry | User ID, route, stack trace, request metadata (sensitive fields redacted) | United States | sentry.io/privacy/ |
| Google Analytics (GA4) | Aggregate marketing-site analytics | Pages viewed, referrer, hashed IP, session metadata (marketing site only) | United States / global | policies.google.com/privacy |
Advertising platform integrations
AdForge integrates with the advertising platforms below so you can validate audience sizes and (in a future release) publish campaigns to ad accounts you control. These platforms are different from the sub-processors above: when you connect your own ad account, the platform also acts as an independent data controller under its own terms and privacy policy for the data it receives. We list them here for transparency and will keep the status column current as features go live.
Reach estimation sends only aggregate, non-identifying targeting parameters(age range, geography, interest IDs) — not your account records or any individual's personal data. Ad publishing, when enabled, will send the campaign settings and creative assets you explicitly choose to publish.
| Platform | Purpose | Data received | Status | Privacy policy |
|---|---|---|---|---|
| Meta (Facebook / Instagram) | Marketing API — audience reach estimation; ad campaign + creative publishing | Aggregate audience targeting parameters (age range, geography, interest IDs) for reach estimation. When ad publishing is enabled: campaign settings, ad copy, and creative assets you choose to publish. | Reach estimation pending API key; ad publishing planned | www.facebook.com/privacy/policy |
| Google Ads | Google Ads API — ad campaign + creative publishing | Campaign settings, ad copy, and creative assets you choose to publish to your connected Google Ads account | Planned — not yet live | policies.google.com/privacy |
| TikTok | TikTok Marketing API — ad campaign + creative publishing | Campaign settings, ad copy, and creative assets you choose to publish to your connected TikTok Ads account | Planned — not yet live | www.tiktok.com/legal/page/global/privacy-policy/en |
| LinkedIn Marketing API — ad campaign + creative publishing | Campaign settings, ad copy, and creative assets you choose to publish to your connected LinkedIn Ads account | Planned — not yet live | www.linkedin.com/legal/privacy-policy |
You can revoke a platform connection at any time — see Data Deletion Instructions.
Dormant integrations (not v1)
Code exists in the platform to call Google Vertex AI (VEO 3.1) for video generation and ElevenLabs for AI voiceover, but these features are not part of the v1 release and are disabled in production. If we enable either in a future release we will add them to the table above before traffic flows.
Questions
Sub-processor questions or objections to a new sub-processor? Email privacy@adforgestudios.com.