Subprocessor List
Subprocessors
Third-party services that process customer data on Milk & Ink Studio's behalf. This list is the canonical version referenced by the Data Processing Agreement (Annex III). We provide at least 30 days' notice before a new subprocessor processes customer data; current customers may object on documented data-protection grounds.
| Subprocessor | Purpose | Data Categories | Region | DPA / Privacy |
|---|---|---|---|---|
| Railway Corp. | Web application + cron worker hosting | Account, usage, request logs | US East / EU West | Link |
| Supabase, Inc. | Postgres database, auth, object storage, transactional email | Account, content metadata, generated assets | US East / EU West | Link |
| Stripe, Inc. | Payments + card-on-file verification (PCI DSS Level 1) | Billing, transaction, payment-method tokens | Global | Link |
| fal.ai, Inc. | Video / image / audio model routing — Wan 2.1, Kling 2.5/2.6/3, Seedance 2, Veo 3, Nano Banana 2, Stable Audio, MMAudio, Flux LoRA training | Prompts, reference frames, generated assets | Global | Link |
| Runway AI, Inc. | Video model inference — Gen-4 (direct API) | Prompts, reference frames, generated video | US | Link |
| ElevenLabs, Inc. | TTS (Eleven v3), Music compose + composition_plan + video-to-music, Sound Effects | Voice samples, scripts, generated audio | US | Link |
| Sync Labs, Inc. (sync.so) | Lipsync — audio + video alignment | Generated video, generated audio | US | Link |
| Groq, Inc. | LLM inference — script planner, suggestions (default copilot lane) | Prompts, metadata | US | Link |
| Google LLC (Gemini via AI Studio) | Vision + LLM — continuity scoring, multimodal review (default vision lane) | Prompts, frames, generated assessments | US / EU | Link |
| Sentry | Error monitoring + performance tracing | IP, error context, stack traces | US / EU | Link |
| PostHog | Product analytics (autocapture disabled; explicit events only) | Usage events, device, IP (truncated) | US / EU | Link |
Notification of new subprocessors
We post changes here at least 30 days before a new subprocessor begins processing customer data, and email workspace administrators on file. To object on documented data-protection grounds, email privacy@milkink.studio. If we cannot reasonably accommodate the objection, your sole remedy is to terminate the affected portion of the Service for convenience and receive a pro-rated refund of pre-paid fees.