Sub-processors
Last updated: 11 August 2026
A sub-processor is a company that processes personal data on our behalf so that Self-Publish.ai can run. Every one below is bound by a data processing agreement, and none of them may use your data for their own purposes. We publish this list under Article 28 of the GDPR and keep it current: when we add or replace a sub-processor, we update this page and the date at the top of it.
Current sub-processors
Vercel
Hosts and serves the web application, including the edge network in front of it.
- Region
- United States, with a global edge network
- Data shared
- Request metadata such as IP address, user agent, and requested URL.
Supabase
Hosts the PostgreSQL database that stores accounts, books, chapters, credits, and billing records.
- Region
- United States
- Data shared
- Account details, manuscripts and book metadata, usage and billing records.
Stripe
Processes subscription payments, credit top-ups, refunds, and invoices on Stripe-hosted checkout.
- Region
- United States and Ireland
- Data shared
- Name, email, billing address, and payment method. We never receive or store full card numbers.
OpenAI
Generates and edits text for the writing, outlining, and editing tools.
- Region
- United States
- Data shared
- The passage of your manuscript or the prompt needed for the feature you invoked. Not used to train models.
Groq
Runs the low-latency model calls behind interactive drafting and classification.
- Region
- United States
- Data shared
- The passage or prompt for the feature you invoked. Not used to train models.
OpenRouter
Routes model requests to a fallback provider when the primary model is unavailable.
- Region
- United States
- Data shared
- The same prompt content that would have gone to the primary model.
Google Sign-In authenticates you if you choose that option, and the Gemini API reads text out of images you upload (cover artwork, scanned pages).
- Region
- United States
- Data shared
- For sign-in: your name, email, and profile picture. For Gemini: the image you uploaded.
Cloudflare
Turnstile checks that the anonymous contact form is submitted by a person rather than a bot.
- Region
- Global network
- Data shared
- IP address and browser signals for the contact form submission only.
Resend
Delivers transactional email: sign-in codes, account notifications, and gift messages.
- Region
- United States
- Data shared
- Recipient email address and the contents of that message.
Amazon Web Services
S3 object storage holds uploaded manuscripts, cover images, and generated exports.
- Region
- United States
- Data shared
- The files you upload and the files we generate for you.
Temporal
Orchestrates long-running background work such as manuscript analysis, proofreading, and export jobs.
- Region
- United States
- Data shared
- Job identifiers and the workflow inputs needed to run the job, including manuscript references.
Meta Platforms
Measures whether our advertising works. The Meta Pixel on the production site reports page views and conversion events such as completed signups and purchases.
- Region
- United States, with global processing
- Data shared
- IP address, user agent, page URL, and the event name. Meta's own _fbp and _fbc cookies identify the browser across visits.
Pexels
Supplies stock photography search results for the cover designer.
- Region
- Germany (EU)
- Data shared
- Only your search term. The request is made by our server, so Pexels never sees your IP address or account.
Distribution partners are not sub-processors
When you publish a book, we send your files, cover, metadata, and pricing to the retailer you selected. That happens only at your direction, and the retailer then acts as its own controller under its own terms, not as our sub-processor. The retailers we can deliver to are:
- Amazon Kindle and Amazon KDP Print
- IngramSpark
- Draft2Digital
- Apple Books
- Rakuten Kobo
- Google Play Books
- Barnes & Noble Press
Questions or objections
Email support@terptechpub.com to ask about a sub-processor or to object to a new one. We respond within 30 days. See also our Privacy Policy for how we use the data these companies process.