Kontagion · Legal
Subprocessors
Effective July 13, 2026 · Last updated October 12, 2026
Kontagion uses the providers below to deliver the product. A provider receives customer data only for the listed purpose and only when the relevant feature is used. Processing locations can include a provider's affiliates and its own subprocessors.
01Current providers
| Provider | Purpose | Data categories | Processing geography |
|---|---|---|---|
| Supabase | Database, authentication, edge functions, and media storage | Account data, project records, uploaded media, and service logs | Customer-selected project region; global support access may occur |
| Stripe | Payments, subscriptions, tax, and fraud prevention | Billing contact, transaction, and payment-method data | United States and global Stripe infrastructure |
| OpenAI | Kyger chat and analysis, speech-to-text transcription, generated voice, requested image generation, and safety checks on prompts | Prompts, requested project context, selected media and audio, and generated responses and output | United States and OpenAI infrastructure |
| Anthropic | Kyger chat when OpenAI is unavailable, and requested KIq project, frame, and film analysis | Prompts, selected project context, extracted frame descriptions, and generated responses | United States and Anthropic infrastructure |
| Google (Gemini API) | Requested image generation with Google models and automated quality checks on generated media | Generation prompts, selected reference images, and generated output | United States and Google infrastructure |
| FAL and selected generation providers | Requested image and video generation | Generation prompts, selected input media, and generated output | United States and provider infrastructure |
| Runway, Higgsfield, Kling, and Seedance | Requested image/video generation and transformation | Prompts, selected input media, and generated output | United States and global provider infrastructure |
| AtlasCloud | Requested image and video generation through selected models | Generation prompts, selected input media, and generated output | United States; selected model-provider infrastructure may also process requests |
| ElevenLabs | Requested speech, sound-effect, and music generation | Text prompts, selected voice references, and generated audio | United States and European/global provider infrastructure |
| Amazon Web Services / Remotion Lambda | Video transcoding and final export rendering | Source media, render instructions, and rendered output | United States (currently us-east-1) |
| Sentry | Consent-gated crash and performance diagnostics | Scrubbed diagnostics, device/browser metadata, and account identifier | United States and global infrastructure |
| Resend | Transactional email delivery | Recipient address and account/invitation email content | United States and global delivery infrastructure |
02International transfers
Where protected data moves across borders, Kontagion requires an applicable transfer mechanism in the governing provider agreement, such as the EU Standard Contractual Clauses, the UK addendum, or an adequacy framework. Provider locations and safeguards are reviewed as part of the vendor-contract process.
03Changes and questions
We update this page before a materially new provider begins processing customer data. Where reasonably practicable, we will post material additions at least 14 days before they take effect. Questions or objections can be sent to info@kontagion.com.
Change log
- October 12, 2026. Added Google (Gemini API), which we already used for Google image models and quality checks on generated media; this page should have listed it sooner. Removed Lovable. OpenAI and Anthropic, both listed before, are now called directly instead of through the Lovable AI Gateway; Anthropic is also the backup when OpenAI is unavailable. Signed-in people were told in the product.