Sub-processors
Last updated: May 4, 2026
GenZHook uses the following sub-processors to deliver the Service. Each sub-processor is bound by a written agreement incorporating the data-protection obligations of our Data Processing Addendum, including GDPR Art. 28 requirements and (where relevant) Standard Contractual Clauses 2021/914 and the UK IDTA.
| Sub-processor | Purpose | Hosting region | Transfer mechanism |
|---|---|---|---|
| Supabase, Inc. | Postgres database, auth, storage | United States (AWS us-east-1) | SCCs (Module Two) |
| Upstash, Inc. | Redis rate-limiting, QStash job queue | United States (AWS us-east-1) | SCCs (Module Two) |
| Stripe, Inc. | Payment processing, invoicing, tax | United States / EU / UK | SCCs + UK IDTA; PCI-DSS Level 1 |
| Resend, Inc. | Transactional email delivery | United States / EU | SCCs (Module Two) |
| Google LLC (Gemini API) | LLM + image generation under no-training enterprise terms | United States / EU | SCCs (Module Two) |
| Hugging Face, Inc. | Inference API for auxiliary models | United States / EU | SCCs (Module Two) |
| Sentry (Functional Software, Inc.) | Error monitoring (scrubbed, no PII) | United States / EU | SCCs (Module Two) |
| Cloudflare, Inc. | DNS, DDoS mitigation, WAF | Global | SCCs (Module Two) |
Change notifications
We will update this page before engaging any new sub-processor with access to personal data. Enterprise customers subscribed to sub-processor notifications at privacy@genzhook.com receive at least 30 days advance notice and may object on reasonable data-protection grounds.
Owner's Reservation of Rights
The Owner reserves the absolute, exclusive, and unfettered discretion, with or without prior notice and without liability, to: (a) add, change, replace, or remove any sub-processor, AI provider, payment processor, hosting region, or vendor; (b) introduce, restructure, withdraw, suspend, or discontinue any feature, plan, integration, price, fee, FX rate, credit weight, quota, discount, coupon, reward, or facility — partially or fully; (c) pass through any sub-processor, AI-provider, infrastructure, payment, or third-party cost increase to invoices or credit weights, immediately or with delay, with no obligation to pass through cost decreases; and (d) modify or replace this Sub-processors page, the DPA, or any related policy at any time with effect upon posting (subject only to legally-required minimum notice). The Owner's Universal Reservation of Rights — Terms of Service section 1.1, the Authorized-Use License in section 1.2, the Benefits Reservation in section 1.3, the Dynamic Pricing & FX clause in section 1.4, and the Comprehensive Owner Protections in section 18 — are incorporated into this page in full. No sub-processor change, AI-provider change, region change, or vendor change gives rise to any refund, credit-back, pro-rated reimbursement, alternative compensation, SLA payout, or service credit of any kind; the No-Refund Policy applies in full and is incorporated by reference. The right to object to a sub-processor change is limited to enterprise customers under written DPA and on reasonable data-protection grounds; commercial objections (e.g., preference for a different vendor) are not a basis for refund, set-off, or termination outside the standard cancellation mechanics (which themselves do not entitle the user to any refund).
Social-media platforms
Platforms you choose to connect (X/Twitter, Instagram, Facebook, LinkedIn, Reddit, Telegram, Threads, Snapchat, Bluesky, WhatsApp Business, Discord) are independent controllers of the content you publish through them. They are not sub-processors of GenZHook, but their own privacy terms apply to content posted via their APIs.