Last updated: September 6, 2026
How to read this
A sub-processor is a company we engage to help deliver AdFrames that may process personal data in the course of doing so. Each one is bound by a data processing agreement limiting it to processing on our instructions, and each incorporates the Standard Contractual Clauses (and, where relevant, the UK International Data Transfer Addendum) for transfers out of the EEA and the UK.
AdFrames uses no artificial-intelligence or machine-learning API anywhere in the product. Image generation is deterministic and runs on our own servers, so no customer data is sent to a model provider and none is used to train one.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Supabase | Authentication, primary database, and private file storage | Account credentials (hashed by Supabase), profile, workspace, catalog configuration, audit records, uploaded frames and fonts, encrypted Meta tokens | United States |
| Vercel | Application hosting, edge delivery, and aggregate site analytics | HTTP request metadata (IP address, user agent, requested path) in the course of serving the application | United States, with global edge delivery |
| Amazon Web Services (S3) | Storage of generated ad creative | Rendered creative images. These are deliberately publicly readable so Meta’s crawler can fetch them for your supplementary feed. | United States (us-east-1) |
| Stripe | Payment processing and subscription billing | Billing email address and payment details, entered directly on Stripe’s own hosted checkout. Card data never reaches AdFrames. | United States and Ireland |
| Resend | Transactional email delivery | Recipient email address and message content | United States |
| Microsoft (Clarity) | Analytics and session replay on the public marketing pages only, and only for visitors who opt in | Page views, clicks, scrolling, mouse movement, a replay of the visit, device and browser information, and approximate location derived from IP address | United States |
| HubSpot | Support chat and the support inbox behind it, loaded only when you press the Help button | Your messages to us and anything you attach to them, the email address and name you give the chat, the pages you visit on our site while the widget is loaded, and a cookie identifier linking those visits to your conversation | United States and the European Union |
| Meta Platforms | The advertising platform AdFrames integrates with, at your instruction | Requests made with your authorisation against your own business, catalog, ad account and creative data. AdFrames does not send Meta any information about your customers. | United States |
Changes
We will update this page before a new sub-processor begins processing customer data. If you have a data processing agreement with us and want advance notice of changes, or wish to object to a new sub-processor, write to privacy@adframes.app and we will add you to the notification list.
Related
See our Privacy Policy for what we collect and why, and our Cookie Policy for what runs in your browser.
Legal entity: Creative Ground Technologies Private Limited
Registered address: T-Hub Foundation, 1C 831, RAIDURG PANMAKTHA, Madhapur, Hyderabad, Telangana, India 500081