Last updated: July 17, 2026
AudioClients uses the third-party service providers below to operate the platform. Each processes personal data only on our instructions and under a data-processing agreement (DPA). For transfers of data from the EEA/UK to the United States, the mechanism is the EU-US Data Privacy Framework where the vendor is certified, with Standard Contractual Clauses (SCCs) as the backstop.
| Provider | Purpose | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Supabase | Database and authentication | All stored account and artist data | USA (AWS) | SCCs + UK addendum |
| Vercel | Application hosting and compute | Data in transit while serving the app | USA | SCCs / EU-US DPF |
| Anthropic (Claude API) | Drafting outreach emails and extracting public contact details | Artist name, genre, track, and email content to be reviewed | USA | SCCs (DPA auto-incorporated; no training on inputs/outputs) |
| Google (Gmail API) | Sending outreach emails from the engineer’s own Gmail account | Recipient address and message body, at send time only | USA | EU-US DPF / SCCs |
| Resend | Inbound reply handling and transactional/alert email | Sender address and a snippet of the reply; alert recipients | USA | EU-US DPF (certified) + SCCs |
| Stripe | Subscription billing | Billing identifiers (card data is held by Stripe, not by us) | USA | EU-US DPF / SCCs |
| Apify | Public-page scraping for artist discovery | Publicly available artist data | USA / EU | SCCs |
| Brave Search, Last.fm, Deezer, MusicBrainz | Enrichment lookups (genre, previews, release signals) | Artist-name queries only | USA / EU | Per-vendor terms |
We update this list when we add, remove, or change a subprocessor. Questions about our subprocessors or a specific data flow can be sent to privacy@audioclients.com. See also our Privacy Policy.