Subprocessors
Last updated: June 2026
Vixal uses the third-party service providers below to run the platform and process customer data. This page is maintained by Vixal and reflects our current subprocessors. We may update it as our infrastructure changes; the “last updated” date above will reflect any changes.
Lovable Cloud (Supabase)
- Purpose
- Application database, authentication, file storage, and serverless functions.
- Data shared
- Account email, hashed password, profile info, subscription metadata, generation records.
- Processing location
- United States / EU (region-managed)
Cloudflare
- Purpose
- Application hosting, edge compute (server functions), CDN, and DDoS protection.
- Data shared
- IP address, request metadata, cached static assets.
- Processing location
- Global edge network
Stripe
- Purpose
- Subscription billing, payment processing, and customer billing portal.
- Data shared
- Name, email, billing address, card details (handled directly by Stripe — Vixal never sees card numbers), subscription status.
- Processing location
- United States, with EU/UK processing for local customers
OpenAI (Sora)
- Purpose
- AI video generation. Your text prompts are sent to OpenAI to produce the video.
- Data shared
- Text prompts, generation parameters. No account email or PII is sent.
- Processing location
- United States
Google (Gemini via Lovable AI Gateway)
- Purpose
- AI text generation for scene prompts in the Chat tab.
- Data shared
- Text prompts you submit.
- Processing location
- United States
Google (Sign-In with Google)
- Purpose
- OAuth authentication when you choose to sign in with Google.
- Data shared
- Your Google account email, name, and avatar URL — only if you use Google sign-in.
- Processing location
- Global
Questions
For data-protection questions or to request a Data Processing Agreement (DPA), email hello@vixal.app.