Sub-processors
Last updated: June 25, 2026
A sub-processor is a third party that may process personal data on Sunra's behalf to deliver the Service. Sunra is an AI creation platform that aggregates many AI models, so the model you choose determines which provider receives your prompt and any media you submit. The list below reflects our current integrations. The authoritative, dated copy is maintained by Sunra and shared with enterprise customers on request.
AI model providers
Prompts and any media you submit for a generation are sent to the provider that runs the selected model. We are securing written no-training / no-retention commitments from these providers (in progress).
| Service | Provider | Purpose | Data processed | Region |
|---|---|---|---|---|
| OpenAI | OpenAI, L.L.C. (USA) | Image and video generation (e.g. GPT Image, Sora) | Prompts, uploaded reference media | United States |
| Google LLC (USA) | Image and video generation (e.g. Veo, Gemini image) | Prompts, uploaded reference media | United States / global Google Cloud | |
| ByteDance (Seedance) | ByteDance Ltd. | Video generation (e.g. Seedance) | Prompts, uploaded reference media | Provider-operated infrastructure |
| Kuaishou (Kling) | Kuaishou Technology | Video generation (Kling models) | Prompts, uploaded reference media | Provider-operated infrastructure |
| fal.ai | Features and Labels, Inc. (USA) | Model hosting / gateway for many image & video models, plus vision-language analysis | Prompts, uploaded reference media | United States |
| Replicate | Replicate, Inc. (USA) | Model hosting for selected models | Prompts, uploaded reference media | United States |
Infrastructure & storage
| Service | Provider | Purpose | Data processed | Region |
|---|---|---|---|---|
| Vercel | Vercel, Inc. (USA) | Application hosting, CDN, web analytics | IP address, request/usage telemetry | United States / global edge |
| Google Cloud Storage | Google LLC (USA) | Storage and delivery of generated media | Generated media, uploaded reference media | United States |
| Cloudflare Turnstile | Cloudflare, Inc. (USA) | Bot / abuse prevention on sign-in | Browser signals for verification | Global edge |
Account, payments & communications
| Service | Provider | Purpose | Data processed | Region |
|---|---|---|---|---|
| Stripe | Stripe, Inc. (USA) | Payment processing and subscription billing | Billing details, payment method (held by Stripe) | United States |
| Google Sign-In | Google LLC (USA) | Optional authentication (Google / One Tap) | Email, name, profile photo (with your consent) | United States |
How we limit what providers receive
Data sent to any model provider is limited to your prompt and any media you submit for that generation. We are obtaining written no-training / no-retention commitments from providers, and customers who require it will be able to use a restricted set of models under our forthcoming compliance mode.
Questions
For the full sub-processor list, data-flow details, or to request our DPA, contact privacy@ponpon.ai.