Last Updated: April 23, 2026
In accordance with our Data Processing Addendum ("DPA"), StarZero (It Just Works, Inc.) engages the Customer Data Sub-processors below to process personal data on behalf of customers. Each processes only the data necessary for the purpose shown; the categories of personal data are described in Annex 1 of our DPA. The DPA governs notice and objection rights for changes to this list. Some providers are engaged only when you use a specific feature or integration, as noted.
To receive email notifications of sub-processor changes, contact us at [email protected].
Customer Data Sub-processors: AI Model and Media Providers
These providers perform AI tasks on Customer Data, such as analysis, chat, transcription, and voice, audio, and video generation. Where Customer Data is sent to an AI provider, we use the provider's paid or API terms and configurations intended to prohibit use of that data to train its general models.
| Sub-Processor | Purpose | Location |
|---|---|---|
| Google (Gemini / Vertex AI) | Multimodal understanding, chat, and Skill execution | United States |
| OpenAI, Inc. | Content analysis and generation | United States |
| Anthropic, PBC | Content analysis and generation | United States |
| OpenRouter, Inc. | Routing of model requests to selected providers | United States |
| ElevenLabs Inc. | Voice and audio generation, dubbing, and voice cloning | United States |
| Gradium | Text-to-speech, speech-to-text, and voice cloning | United States |
| ByteDance Ltd. (Seedance) | AI video generation | United States / Singapore |
| Epidemic Sound AB (optional integration) | Licensed music and sound effects | European Union |
| Pexels GmbH | Stock photo and video search | European Union |
Customer Data Sub-processors: Infrastructure and Storage
| Sub-Processor | Purpose | Location |
|---|---|---|
| Google Cloud Platform (Google LLC) | Cloud compute, processing, and custom model hosting | United States |
| Cloudflare, Inc. | Object storage of source media, streaming, content delivery, and security | Global |
| Backblaze, Inc. | Storage of final render outputs | United States |
| MongoDB, Inc. | Application database (accounts, metadata, transcripts) | United States |
Vector search and caching run on StarZero's own servers within Google Cloud and are not separate sub-processors.
StarZero Controller Service Providers
The providers below process personal information for which StarZero acts as a controller, such as website visitor, account, billing, and support information. They are not Customer Data Sub-processors unless they process Customer Personal Data for a Customer-facing feature.
| Service Provider | Purpose | Location |
|---|---|---|
| Google Analytics (Google LLC) | Website analytics (loaded only with analytics consent) | United States |
| Mixpanel, Inc. | Website analytics and account-linked product analytics (loaded only with analytics consent) | United States |
| Stripe, Inc. | Payment processing and billing | United States |
| Cloudflare, Inc. (Turnstile) | Bot and abuse prevention during sign-in | Global |
Customer Data Sub-processors: Operations
| Sub-Processor | Purpose | Location |
|---|---|---|
| Twilio SendGrid | Transactional and account email | United States |
| Sentry | Error monitoring and diagnostics | United States |
| Intercom, Inc. | Customer support and in-app messaging | United States |
Notes
- Data minimization. We transmit only the data necessary for each sub-processor to perform its function.
- AI-provider model training. Where Customer Data is sent to an AI provider, we use paid or API terms and configurations intended to prohibit use of that data to train the provider's general models. Operational retention, safety review, and abuse-monitoring terms may vary by provider.
- Optional sub-processors. Some sub-processors (such as Epidemic Sound) are engaged only if you enable the corresponding feature or integration.
- Contractual safeguards. We enter into written agreements with Customer Data Sub-processors that require them to process Customer Personal Data only to provide the contracted services and to apply appropriate data-protection safeguards.
- International transfers. Where a sub-processor processes data outside the EEA, UK, or Switzerland, appropriate transfer mechanisms (such as Standard Contractual Clauses or adequacy decisions) are in place.
For questions about our sub-processors, contact [email protected].