Third-Party Services Used
Last updated: 15 September 2026
This page is the current list of third-party service providers in use, referenced in Article 21.5 of the Suflor Terms of Service and in the Privacy Notice. Updating this page — adding or removing a provider, or changing a link — does not amend the Terms or the Privacy Notice; it shows which provider currently carries out an existing obligation. Where a change of provider alters the scope of personal data processing, that change is announced separately through an update to the Terms and/or the Privacy Notice.
| Provider | Purpose | Terms | Privacy Policy | Data Processing Agreement |
|---|---|---|---|---|
| Google Gemini API | Script analysis, language detection, character and line splitting | Terms of Service | Privacy Policy | Data Processing Addendum Standard Contractual Clauses |
| Google (Sign-in) | Sign in with Google | Terms of Service | Privacy Policy | —1 |
| ElevenLabs | AI voice generation | Terms of Use EEA Terms of Use |
Privacy Policy | Data Processing Addendum Data use / model training |
| Deepgram | Speech recognition, line tracking | Terms of Service | Security and Privacy | —2 |
| Supabase | Database and file storage infrastructure | Terms of Service | Privacy Policy | Data Processing Addendum |
| Cloudflare R2 | Storage of generated audio clips | Terms of Use | Privacy Policy | Data Processing Addendum |
| OneSignal | Push notifications | Terms of Service | Privacy Policy | Data Processing Addendum |
| Sentry | Error monitoring and session replay (text and images are masked) | Terms of Service | Privacy Policy | Data Processing Addendum |
| RevenueCat | Purchase and subscription management | Terms of Service | Privacy Policy | Data Processing Addendum |
| Apple (Sign-in, IAP, Notifications) | Sign in with Apple, in-app purchases, notification infrastructure | Apple Media Services Terms | Privacy Policy | —3 |
| Apple AdServices | Ad attribution (IDFA is not used) | Technical documentation | Apple Advertising and Privacy | —3 |
Providers may change their own terms and policies over time; for the current text, please refer to the provider's own site. This page is published for information and does not replace the providers' own documents.
1 For sign-in, Google is in the same position as Apple: it carries out authentication on its own behalf, under its own Privacy Policy. The Gemini API, by contrast, processes on our behalf and is covered by the data processing addendum above.
2 Deepgram does not publish its standard data processing agreement at a public address; it is provided (including the Standard Contractual Clauses) only on direct request to security@deepgram.com.
3 For sign-in, in-app purchases, notification infrastructure and ad attribution, Apple acts as an independent controller under its own Privacy Policy rather than Suflor's, and therefore does not offer developers a public, signable data processing agreement.