Legal
Subprocessors
Last updated: June 22, 2026
To run Variafy we use the third-party providers below. Each processes personal data only on our instructions and under a data-processing agreement (linked). We keep this list current; if we add or replace a provider that handles personal data, we update this page.
| Provider | Purpose | Data processed | Location | DPA |
|---|---|---|---|---|
| Supabase Supabase, Inc. | Authentication and database (accounts, trial metering, purchase records). | Email, name, account identifiers, trial usage, purchase records. | United States / EU | DPA ↗ |
| Stripe Stripe Payments Europe, Ltd. / Stripe, Inc. | Payment processing for the one-time license purchase. | Name, email, billing details, payment metadata. | Ireland / United States | DPA ↗ |
| Resend Resend, Inc. | Transactional email delivery (license key, account email). | Email address, message content (license key). | United States | DPA ↗ |
| Railway Railway Corp. | Application hosting and infrastructure for the site and cabinet. | Any data in transit/at rest while the service runs (hosting layer). | United States | DPA ↗ |
| Anthropic Anthropic, PBC | AI text model (Claude) used to read ad structure and draft variations. | Ad copy and offer text you submit for a generation. | United States | DPA ↗ |
| OpenAI OpenAI, L.L.C. | AI image model (gpt-image) used to render creatives. | The source ad image and the generation prompt you submit. | United States | DPA ↗ |
| Google Google Ireland Ltd. / Google LLC | Optional: "Sign in with Google" and pushing finished creatives to your own Google Drive. | Google account identifier/email; for Drive, only files you create with the app. | Ireland / United States | DPA ↗ |
| Meta Meta Platforms Ireland Ltd. / Meta Platforms, Inc. | Optional, only when you push creatives to your own Meta ad account's image library. | Your own Meta access token and the images you choose to upload. | Ireland / United States | DPA ↗ |
Providers marked "optional" in the Purpose column are used only if you choose the relevant feature (e.g. selecting a specific AI provider, or connecting Meta / Google Drive).
Questions about our subprocessors: privacy@variafy.com.