Subprocessors and providers
Last updated: September 29, 2026
On this page
This is a translation. The Spanish version prevails in case of any discrepancy.
Controller: The Interactive Studio, S.L., tax ID (CIF) B85428746 (full details in the Legal notice). Contact, including privacy: [email protected].
This page lists the providers The Interactive Studio uses to run Fountant. It is split into blocks, because their roles differ.
1. Service subprocessors (process data on the customer’s behalf)
These providers take part in processing the content and data customers connect or upload to the platform (art. 28.2 and 28.4 GDPR). The Interactive Studio contractually imposes on them obligations equivalent to those in its DPA and is liable for their compliance. Any addition or replacement is announced to administrators 30 days in advance, and this list is updated.
| Provider | Service | Processing location | Safeguards |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the application server and database | Nuremberg (Germany, EU) | Provider's data processing agreement (Art. 28 GDPR); no international transfer |
| DigitalOcean, LLC | Private file storage (Spaces) and text AI models through DigitalOcean Gradient (Serverless Inference) | File storage: Frankfurt (Germany). AI inference: DigitalOcean infrastructure, which may be outside the EEA | Provider's DPA with standard contractual clauses (SCCs); no use of data for training under its terms |
| Cloudflare, Inc. | DNS, delivery network and perimeter security, bot protection (Turnstile) and hosting of the public website | EU / global (distributed network) | EU-US Data Privacy Framework and SCCs |
| Resend, Inc. | Transactional email (sign-in codes, invitations, notices) | USA | EU-US Data Privacy Framework / SCCs |
| fal.ai (Features & Labels, Inc.) | AI image generation, once that feature is switched on (not active today) | USA | Being formalised; will be confirmed on this list before the feature is switched on |
2. Providers for which The Interactive Studio acts as controller
Tools for the public website, user accounts, payments and measurement, when The Interactive Studio processes visitor and user data as controller. Non-essential technologies require your prior consent; see the Cookie policy.
| Provider | Use | Condition and safeguards |
|---|---|---|
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Payments, subscriptions, trial and customer portal. Fountant never sees card details | Needed to subscribe; DPF and SCCs |
| PostHog Inc. (EU Cloud) | Product analytics for the application | Only with the user’s consent; EU servers |
| Meta Platforms Ireland Ltd. (Meta Pixel and Conversions API) | Measuring campaigns and sign-ups, with the data described in the Privacy policy | Only with marketing consent; DPF |
| Google Ireland Ltd. / Google LLC | Sign in with Google | Only if you choose that method; DPF/SCCs under each provider’s terms |
| Microsoft Ireland Operations Ltd. / Microsoft Corporation | Sign in with Microsoft | Only if you choose that method; DPF/SCCs under each provider’s terms |
| Apple Distribution International Ltd. / Apple Inc. | Sign in with Apple | Only if you choose that method; DPF/SCCs under each provider’s terms |
| Cloudflare, Inc. (Turnstile) | Bot protection on website and sign-up forms | Needed for security; DPF and SCCs |
| Resend, Inc. | Access request and account emails | Needed for the service; DPF / SCCs |
3. Social platforms the customer connects
Meta Platforms Ireland Ltd. (Instagram and Facebook) and Google Ireland Ltd. / Google LLC (YouTube API) receive the content the customer decides to publish and provide Fountant with the history, comments and messages of the accounts the customer connects. They act as independent controllers under their own terms; they are not subprocessors. Use of the YouTube API is subject to the YouTube Terms of Service and the Google Privacy Policy.
4. Changes to this list
This is the living list referred to in clause 7 of the DPA. Each update changes the date at the top; customers also receive the contractual 30 days’ notice for additions or replacements in block 1.