Legal — 07
Sub-processors
Six named companies, and what each one is for. This is the complete list — not the notable ones, the whole set.
Last updated: 8 September 2026
- Studio
- Silvanè Studios
- Based in
- Ontario, Canada
- Contact
- hello@silvanestudios.com
Running a studio and a client workspace means using other people’s infrastructure. Rather than describe them vaguely as “trusted partners”, here they are by name, with what each can see. Each processes information only on our instructions and may not use it for its own purposes.
Vercel
United StatesWebsite and application hosting, edge delivery, file storage for uploaded assets.
Can hold — Anything submitted through the site in transit; uploaded files; server logs including IP address.
Neon
United StatesThe application database — enquiries, accounts, projects, and client records.
Can hold — Names, email addresses, enquiry content, account credentials in hashed form, project records.
Upstash
United StatesRate limiting and short-lived reservations, such as holding an Edition during checkout.
Can hold — IP-derived rate-limit keys and transient identifiers. No enquiry content.
Stripe
United States, with global processingPayment processing for Editions and invoices.
Can hold — Billing name, email, and payment details, which are entered on Stripe's own hosted page. Card numbers never reach the studio's servers.
Resend
United StatesTransactional email — enquiry notifications, sign-in and password messages, project updates.
Can hold — Email addresses and message content.
Google (Gemini API)
United StatesThe studio concierge, which answers questions about a signed-in client's own project.
Can hold — The question asked and the project facts needed to answer it. See the AI Disclosure for what is withheld.
Only when the concierge is used.
Authentication is ours
There is no identity provider in the list because the studio does not use one. Sign-in runs in our own application, and passwords are stored as bcrypt hashes that cannot be reversed.
Where they are
All of the above process data in the United States, which means data held there is subject to that country’s laws while it is there. The Privacy Policy says the same thing in the section on cross-border storage, because it matters enough to say twice.
Your own project’s vendors
This list covers the studio’s own systems. A website we build for you is deployed into your hosting account and may use services you choose — a booking tool, a payment provider, a mailing platform. Those are your sub-processors, they belong in your own privacy policy, and we will give you the list at handover so writing it is straightforward.
Changes
When a vendor is added or removed, this page changes in the same release as the code. Clients with an active project can ask to be notified of changes in advance; email hello@silvanestudios.com and we will add you to that list.