Sub-processors

Last updated: 20 May 2026

This page lists the third-party service providers ("sub-processors") that Scalica Ltd engages to help deliver its Services (ContentTagger, Real UGC from Customers, Release Radar, and Inventory Forecast). Each sub-processor processes personal data on our instructions and is bound by a Data Processing Agreement. This page is referenced by our Privacy Policy, Terms of Service, and Data Processing Addendum.

AI providers and training. Where we use AI providers to deliver features such as image tagging or content moderation, we engage them as sub-processors under agreements that prohibit them from using the data we send to train, develop, or improve their general AI/ML models. We do not use Google Drive data, or any Customer Content, to train or improve any AI/ML model.

Current sub-processors

Sub-processor	Purpose	Location	Used by
Supabase	Database, authentication, file storage, edge function hosting	EU (Ireland / Frankfurt)	All Services
Anthropic	AI image analysis for tag generation and content moderation	USA, with EU data processing addendum; does not train on our data	ContentTagger, Real UGC
Stripe	Payment processing, subscription management	Ireland (Stripe Payments Europe Ltd) and USA	All paid Services
Resend	Transactional and invite email delivery	USA, with EU SCCs	All Services
Cloudflare	DNS, content delivery, DDoS protection	Global edge network	All Services
Google LLC	OAuth authentication; Drive API access (only when you connect Drive)	Governed by your Google account settings	ContentTagger
Shopify Inc.	OAuth authentication; store data access	Governed by your Shopify merchant agreement	Real UGC
Sentry	Error monitoring and diagnostic logging	EU region	All Services

Google API Services User Data Policy

ContentTagger's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except the AI provider needed to generate tags at the moment you initiate tagging, and we do not use Google user data to train or improve any AI/ML model.

Changes

We will give at least 30 days' notice by email before adding or replacing a sub-processor that materially changes the data flow, so that customers can object before the change takes effect, as described in our Data Processing Addendum.

Contact

Questions about our sub-processors: [email protected].