Sub-processors
Last updated: 11 August 2026
A sub-processor is a company that processes personal data on our behalf so that Self-Publish.ai can run. Every one below is bound by a data processing agreement, and none of them may use your data for their own purposes. We publish this list under Article 28 of the GDPR and keep it current: when we add or replace a sub-processor, we update this page and the date at the top of it.
Current sub-processors
Google Cloud
Runs the whole platform: the web application and background workers on Google Kubernetes Engine, the PostgreSQL database on Cloud SQL, uploaded files and generated exports in Cloud Storage, and application secrets in Secret Manager. The Temporal job orchestrator runs inside this cluster rather than at a third party.
- Region
- United States (us-east4, Northern Virginia)
- Data shared
- Everything the service stores: account details, manuscripts and book metadata, uploaded and generated files, usage and billing records, and request metadata such as IP address and user agent.
Stripe
Processes subscription payments, credit top-ups, refunds, and invoices on Stripe-hosted checkout.
- Region
- United States and Ireland
- Data shared
- Name, email, billing address, and payment method. We never receive or store full card numbers.
OpenAI
Generates and edits text for the writing, outlining, and editing tools.
- Region
- United States
- Data shared
- The passage of your manuscript or the prompt needed for the feature you invoked. Not used to train models.
Groq
Runs the low-latency model calls behind interactive drafting and classification.
- Region
- United States
- Data shared
- The passage or prompt for the feature you invoked. Not used to train models.
OpenRouter
Routes model requests to a fallback provider when the primary model is unavailable.
- Region
- United States
- Data shared
- The same prompt content that would have gone to the primary model.
Google Sign-In authenticates you if you choose that option, and the Gemini API reads text out of images you upload (cover artwork, scanned pages).
- Region
- United States
- Data shared
- For sign-in: your name, email, and profile picture. For Gemini: the image you uploaded.
Cloudflare
Turnstile checks that the anonymous contact form is submitted by a person rather than a bot.
- Region
- Global network
- Data shared
- IP address and browser signals for the contact form submission only.
Resend
Delivers transactional email: sign-in codes, account notifications, and gift messages.
- Region
- United States
- Data shared
- Recipient email address and the contents of that message.
Meta Platforms
Measures whether our advertising works. The Meta Pixel on the production site reports page views and conversion events such as completed signups and purchases.
- Region
- United States, with global processing
- Data shared
- IP address, user agent, page URL, and the event name. Meta's own _fbp and _fbc cookies identify the browser across visits.
Microsoft Clarity
Records anonymised session replays and heatmaps so we can see where the product is confusing. Typed text and form fields are masked before they leave the browser.
- Region
- United States, with global processing
- Data shared
- Page URLs, clicks, scrolling, viewport size, browser and device type, and a Clarity cookie that identifies the browser across visits.
Pexels
Supplies stock photography search results for the cover designer.
- Region
- Germany (EU)
- Data shared
- Only your search term. The request is made by our server, so Pexels never sees your IP address or account.
Distribution partners are not sub-processors
When you publish a book, we send your files, cover, metadata, and pricing to the retailer you selected. That happens only at your direction, and the retailer then acts as its own controller under its own terms, not as our sub-processor. The retailers we can deliver to are:
- Amazon Kindle and Amazon KDP Print
- IngramSpark
- Draft2Digital
- Apple Books
- Rakuten Kobo
- Google Play Books
- Barnes & Noble Press
Questions or objections
Email support@self-publish.ai to ask about a sub-processor or to object to a new one. We respond within 30 days. See also our Privacy Policy for how we use the data these companies process.