SUBPROCESSOR & THIRD-PARTY PROVIDER REGISTER
To deliver our neural speech platform and related workspace services, THE CRAFT SHOP engages trusted third-party service providers ("Subprocessors" and infrastructure partners). Each provider is selected following an assessment of their security controls and data protection practices.
This register provides public transparency into the external entities that may receive, host, or process personal data in connection with the Voocaly platform.
| Provider & Entity | Role / Purpose | Data Categories | Location & Safeguards | Terms / DPA |
|---|---|---|---|---|
Paddle Paddle Payments Ltd / Paddle.com Inc. | Merchant of Record, payment checkout, recurring subscription billing, sales tax compliance. | Billing address, customer email, transaction IDs, subscription status. | UK, EU, USA UK DPA / EU SCCs | Paddle Privacy |
Google Cloud / Firebase Google LLC | User authentication, application database (Firestore), hosting, and consent-gated telemetry. | Account email, User UID, text scripts, usage counters, telemetry events. | USA / Global Edge Applicable contractual and international-transfer safeguards | Google Privacy |
OpenRouter OpenRouter Inc. | AI Model Gateway for neural speech synthesis, voice cloning inference, and Luna assistant chat. | Text scripts, voice IDs, reference audio payload (for clones), chat messages. | USA Commercial API Terms | OpenRouter Privacy |
Fish Audio Fish Audio Inc. | Zero-shot voice cloning model and neural synthesis engine (via OpenRouter and direct fallback). | Text scripts, reference audio embeddings. | USA Commercial API Terms | Fish Audio Privacy |
xAI xAI Corp. | Grok TTS speech synthesis (direct REST API endpoint). | Text scripts, voice tags, language codes. | USA Commercial API Terms | xAI Privacy |
Microsoft Microsoft Corporation | Edge TTS demo voice synthesis (via local Python library connecting to Speech Services). | Text scripts, demo voice IDs. | USA / Global Microsoft Services Agreement | Microsoft Privacy |
Hostinger Hostinger International Ltd. | Production Cloud VPS Infrastructure & Web Server Hosting (application runtime, process execution, and filesystem storage). | Encrypted web traffic in transit, server execution logs, temporary local file storage. | EU / Lithuania Provider Terms of Service & Applicable Data Safeguards | Hostinger Privacy |
OpenRouter acts as a model gateway and routes inference requests to upstream model providers (including OpenAI, Google, and Meta) depending on the selected voice engine or AI copilot function. Voocaly's contractual relationship is with OpenRouter; downstream provider data handling is governed by OpenRouter's agreements with those model providers.
Voocaly does not independently represent the retention, training, or data-handling practices of each individual downstream model provider.
Subprocessor Changes & Notification Rights
We maintain an up-to-date register on this page. Enterprise and business customers with an executed Data Processing Addendum will receive at least thirty (30) days' advance notice of any new subprocessor additions by email, with the right to object on reasonable data protection grounds.