To deliver Treform, Treform Inc. engages the third-party service providers below. Each subprocessor processes personal data under a written agreement and is bound by obligations no less protective than those in our Privacy Policy.
We review this list as we add, remove, or change vendors. Material changes affecting the processing of personal data will be reflected here.
| Subprocessor | Purpose | Data Categories | Location | Privacy |
|---|---|---|---|---|
| Supabase | Authentication, Postgres database, object storage, row-level security. | Account data (email, name, avatar, OAuth identifiers), project scene graphs, BYOK-encrypted keys, billing and usage metadata, and — where you have accepted the cookie notice — marketing-site analytics events (pseudonymous visitor identifier, pages viewed, clicks, time on page, approximate country). | United States | Policy |
| Vercel | Application hosting, edge network, serverless compute, analytics and performance monitoring. | Server request logs, IP address, user-agent, performance metrics, anonymized usage analytics. | United States | Policy |
| Whop | Payment processing, subscription management, checkout, webhook events. | Billing information (handled directly by Whop), subscription identifiers, plan status. | United States | Policy |
| Anthropic | Large language model (Claude) for agent chat, tool-use, and scene editing. | Prompts, conversation history, scene context, attached images, tool-call metadata. | United States | Policy |
| FAL | Generative image rendering (nano-banana-2 edit endpoint) for project renders. | Rendering prompts, input images uploaded to FAL CDN, output imagery. | United States | Policy |
| Brevo | Transactional email, feedback delivery, contact sync for newly signed-up users. | Email address, name, feedback messages and attachments. | European Union (France) | Policy |
| Google OAuth authentication for sign-in. | Basic profile (email, name, avatar) returned by Google when you sign in. | United States | Policy |
Model Training
Under our commercial agreements with Anthropic and FAL, inputs and outputs from API calls we make on your behalf are not used to train their foundation models. We do not opt in to any optional training program. See each subprocessor's linked policy for current terms.
Notice of Changes
We will update this page when we add or remove a subprocessor. If you would like to be notified of changes, email support@treform.ai.