Kontagion · Legal
Subprocessors
Effective July 13, 2026
Kontagion uses the providers below to deliver the product. A provider receives customer data only for the listed purpose and only when the relevant feature is used. Processing locations can include a provider's affiliates and its own subprocessors.
01Current providers
| Provider | Purpose | Data categories | Processing geography |
|---|---|---|---|
| Supabase | Database, authentication, edge functions, and media storage | Account data, project records, uploaded media, and service logs | Customer-selected project region; global support access may occur |
| Stripe | Payments, subscriptions, tax, and fraud prevention | Billing contact, transaction, and payment-method data | United States and global Stripe infrastructure |
| Lovable AI Gateway and model providers | Kyger chat, analysis, and transcription routing | Prompts, requested project context, and generated responses | United States and provider infrastructure |
| Anthropic | Requested KIq project, frame, and film analysis | Selected project context, extracted frame descriptions, and analysis prompts and responses | United States and Anthropic infrastructure |
| FAL and selected generation providers | Requested image and video generation | Generation prompts, selected input media, and generated output | United States and provider infrastructure |
| Runway, Higgsfield, Kling, and Seedance | Requested image/video generation and transformation | Prompts, selected input media, and generated output | United States and global provider infrastructure |
| ElevenLabs | Requested speech, sound-effect, and music generation | Text prompts, selected voice references, and generated audio | United States and European/global provider infrastructure |
| Amazon Web Services / Remotion Lambda | Video transcoding and final export rendering | Source media, render instructions, and rendered output | United States (currently us-east-1) |
| Sentry | Consent-gated crash and performance diagnostics | Scrubbed diagnostics, device/browser metadata, and account identifier | United States and global infrastructure |
| Resend | Transactional email delivery | Recipient address and account/invitation email content | United States and global delivery infrastructure |
02International transfers
Where protected data moves across borders, Kontagion requires an applicable transfer mechanism in the governing provider agreement, such as the EU Standard Contractual Clauses, the UK addendum, or an adequacy framework. Provider locations and safeguards are reviewed as part of the vendor-contract process.
03Changes and questions
We update this page before a materially new provider begins processing customer data. Where reasonably practicable, we will post material additions at least 14 days before they take effect. Questions or objections can be sent to info@kontagion.com.