Subprocessors
1. Overview
To provide the Craftology platform, ICVR LLC engages trusted third-party companies ("subprocessors") that may process personal data on our behalf. This page lists those subprocessors, the service they provide, and where they process data. It supports our commitments under the GDPR (Art. 28) and our Data Processing Addendum.
Action required before publishing: The entries below are drawn from the technologies currently visible in the product and must be verified and completed by the Craftology team — confirm each vendor, the data they receive, their location, and their data-protection terms (DPA / Standard Contractual Clauses). Remove any that do not apply and add any that are missing (e.g., your AI inference provider, payment processor, email/support tools).
2. Infrastructure Subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting & content storage (S3) | Account data, user-generated content | United States |
3. Platform & Service Subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Google (Analytics) | Product analytics | Usage data, device/identifiers | United States |
| Google (reCAPTCHA) | Bot / abuse prevention | IP address, interaction data | United States |
| Viral Loops | Referral / waitlist campaigns | Email, referral activity | United States / EU |
| AI inference provider — TBD | Generative model inference | Prompts and content submitted for generation | TBD |
| Payment processor — TBD | Billing & payments | Name, billing details (tokenized) | TBD |
| Email / communications — TBD | Transactional & support email | Email address, message content | TBD |
4. International Transfers
Where personal data of individuals in the EU, UK, or other regulated jurisdictions is transferred to a subprocessor in another country, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (and the UK International Data Transfer Addendum) together with supplementary measures. Confirm the specific mechanism in place with each subprocessor above.
5. Changes and Notifications
We may update this list as we add, remove, or change subprocessors. Customers under a Data Processing Addendum can request to be notified of material changes and may have the right to object as set out in that addendum. To subscribe to change notifications, email privacy@craftology.io.
6. Contact
Questions about our subprocessors? Email privacy@craftology.io.