Sub-processors and where your data is processed
_Last updated 13 October 2026_
Kaldune is one studio, run from one place. Your account and the rooms your briefs live in are stored on Google Cloud in the United States: our servers and database run in us-central1 (Iowa), files are stored in Google's US multi-region, and a backup copy is held in us-west1 (Oregon). The open models we run ourselves, such as the one that makes music, run on our own Google Cloud servers, and when the studio hosts an app for you, it runs on our own Google Cloud cluster; neither involves an outside vendor. A few vendors below process outside the United States, as their rows state. The vendors below do specific pieces of the work on our behalf; each one receives only the content that piece needs, and only while it is being made. This page is the list the Data Processing Addendum refers to.
If you are in the EEA, the UK or Switzerland
Your data is transferred to the United States under the EU Standard Contractual Clauses (Module Two, controller to processor), the UK Addendum and the Swiss FADP amendments, as set out in section 9 of the DPA. Each vendor in the table below publishes its own SCC-based data processing terms, linked where we have them on file.
Kaldune does not run a second region. Data residency inside the EEA or another territory is a custom engagement for an organisation under contract, wired after that organisation asks for it and pays for it. This is the same footing consumer AI services take (US processing under SCCs for everyone; residency as a separate enterprise contract), and it is the decision recorded in our go-live gate on 2026-08-28: global from day one, residency deal-driven.
The vendors
Every row is derived from what our software actually calls. A vendor our code reaches that is missing from this page fails our build, so the list cannot drift from the truth. "Where our call lands" is the region we send to; each vendor's own sub-processors are theirs to disclose.
| Vendor | What it does for your work | What reaches it | Where our call lands | Terms |
|---|---|---|---|---|
| Google Cloud | Hosting, storage, database, secrets, build, sign-in, edge (Cloud Armor, Cloud CDN) | All account and room data at rest and in flight | United States (Iowa); the CDN edge holds only public share and publish faces | terms and DPA |
| Anthropic | Language model inference (the studio's intelligence) | Brief text, uploaded files the studio reads, generated text | United States | terms and DPA |
| Google Gemini API | Image generation and editing (the Developer API) | Images from the work | United States (paid tier: no training on prompts) | terms and DPA |
| Google Vertex AI on the Kaldune GCP project | Video, audio and image understanding and generation, and deep research | Video, audio and images from the work; research queries | Global endpoint (Google routes within its regions); retention past the request: not determined | terms and DPA |
| fal.ai | Image, video and upscale model inference (the models it fronts: flux, kling, seedance, veo, hailuo, vidu, ideogram, recraft, topaz, grok, llama_ocr) | Prompts, reference images and video for the piece being made | United States | DPA on file at account opening |
| Leonardo | Image model inference (an adapter a brief may reach for) | Prompts and reference images | United States | DPA on file at account opening |
| ElevenLabs | Voice and sound synthesis; speech to speech (a recording re-voiced, direct) | Script text; a recording when a brief re-voices one; a voice only when a brief uploads one | United States (EU processing is an enterprise option we do not use) | terms and DPA |
| Cartesia | Voice synthesis | Script text | United States | DPA on file at account opening |
| Tavily | Web search and page retrieval for briefs that need research | Search queries derived from the brief; fetched page addresses | United States | DPA on file at account opening |
| Pexels | Stock footage and photos a brief sources under the Pexels License (free for commercial use; the photographer is credited on every file) | Search words derived from the brief; the files fetched | Germany (Pexels GmbH, a Canva company) | DPA on file at account opening |
| Epidemic Sound | Licensed music and sound effects a brief sources from the Epidemic Sound library (each music track credited to its composers and artists) | Search words derived from the brief; the ids of the files fetched | Sweden (Epidemic Sound AB) | DPA on file at account opening |
| Stripe | Payments | Name, email, billing address, tax id; the card itself goes to Stripe directly and never to our servers | Global (Stripe-managed) | terms and DPA |
| Twilio Verify | Phone verification (one-time codes; Fraud Guard risk signals) | Phone number, delivery metadata | United States (one-time codes are not offered from the EU region) | terms and DPA |
| Fingerprint | Device identification on sign-in and the studio's first message (the welcome seed's one-seed-per-device guard); bot, VPN and incognito signals recorded as facts | Browser and device signals the Fingerprint agent collects in your browser; your IP address; no name, email or brief content | United States (the us region of our workspace) | terms and DPA |
| Resend | Transactional email (sign-in codes, receipts, share and delivery notices) | Recipient address, message content | To be confirmed at account opening (EU region if offered) | terms and DPA |
| Formspree | Contact-form relay on the public site, only when configured | The message you type into the contact form | United States | DPA on file at account opening |
| Google Maps and Fonts | Place lookups a brief asks for; web fonts fetched by your browser; the font files and Google Fonts' public family list the studio reads for a font a brief names | Place queries; your browser's font requests; the family name and weight of a font a brief names (no other client data rides the font requests) | United States / global | terms and DPA |
| Cloudflare | Domain name service, certificate authorization, and DMARC aggregate reports for our domains | Domain name lookups and sending-domain authentication statistics; no message content, no recipient addresses, no account or room data | Global edge | terms and DPA |
Pages you publish on kaldune.app are delivered through Cloudflare's network edge, which handles each published page's content and its visitors' requests (IP address, browser); no account data and no private room data go through it.
Terms marked "on file at account opening" belong to vendors whose data processing terms we accept when the account is opened; we do not print a link we have not read.
Public registers the studio searches
These are public registers the studio queries, not sub-processors: they do not process customer data on our behalf, and they receive only the search itself.
- The EU trade mark register, run by the European Union Intellectual Property Office (EUIPO). The studio sends the search only, from the brief: the mark, and any Nice classes and statuses it names; no client files or client account details go to it.
- The US trademark register, run by the United States Patent and Trademark Office (USPTO). The studio sends the number looked up only, from the brief: a serial or registration number; no client files or client account details go to it.
What we do not do
- We block access at our network edge from every country and territory where Kaldune is not offered (listed in Section 13 of the Terms of Service), and we refuse a card from them at checkout. There is no other geographic rule in our rate limiting or firewall.
- We do not train models on your work, and we route model calls to vendors whose default is no training on customer data. The open models we run on our own servers are never trained on your work either.
- Phone verification, where offered, is delivered by Twilio from the United States. Verification is a guard on promotional credit only; it never gates signing up or paying.
Changes
New sub-processors are announced 30 days before they begin handling customer data. Customers covered by our Data Processing Addendum may object under it. Write to privacy@kaldune.ai with questions about any vendor on this page.