Privacy notice
Last updated: 2026-05-07
Full policy is being finalised. The sub-processor list below is authoritative for what data we share and with whom.
Sub-processors
We rely on the following sub-processors. Signed Data Processing Agreements are on file with each.
- Vercel — application hosting (USA, SCC + EU-US DPF)
- Clerk — authentication (USA, SCC)
- Cloudflare — D1 database, R2 storage, Workers, Queues, Turnstile (EU + USA, SCC)
- OpenAI — image generation (USA, SCC) — added in Phase 2
- Replicate — fallback image generation (USA, SCC) — added in Phase 2
- Stripe — payments + EU VAT (Ireland for EU customers) — added in Phase 4
- PostHog — product analytics (Frankfurt EU host) — added in Phase 5
- Resend — transactional email (USA + EU send region) — added in Phase 5
- CookieYes — cookie consent + policy generation (India SCC)
Have a question? hello@meaura.io