Providers & Ad Partners

OpenAI

Purpose: account authentication infrastructure, upload content safety screening, and AI image processing. Data involved: account identifiers supplied through authentication; prompts; uploaded artwork, product images, model references, and other images sent for safety screening or generation; and related technical metadata. Processing locations depend on OpenAI’s service infrastructure and contractual terms.

AI retention and training: OpenAI publishes no training on API content by default unless the API customer opts in. Default abuse-monitoring logs may contain customer content and are generally retained for up to 30 days, subject to legal exceptions and applicable controls; image safety screening can result in retention for manual review. Deletion from StudioMock does not automatically delete those provider records. See AI processing and provider retention and OpenAI’s API data controls.

Kling AI

Purpose: AI video generation and remixing through Kling’s first-party API. Data involved: prompts, starting videos, uploaded product and artwork references, generated videos, and technical request metadata. Video processing and provider retention describes locations, retention and privacy requests. See Kling’s API Privacy Policy.

Cloudflare

Purpose: application hosting, content delivery, network security, database, and object storage. Data involved: account and subscription metadata, User Content and generated images and videos, request and security data, and service records. Processing may occur through Cloudflare’s global network and configured storage locations.

Stripe

Purpose: hosted checkout, payment processing, tax functionality, fraud prevention, billing portal, and subscription lifecycle. Data involved: name, email, billing and tax information, payment details provided directly to Stripe, customer and subscription identifiers, transaction status, and plan selection.

Google

Purpose: AI video generation and remixing through Google’s first-party Gemini API, including video workflows and template remixes. Data involved: prompts, starting videos or selected clips, product, artwork and model-reference images needed for the request, generated videos, and technical request metadata. This AI processing is separate from optional analytics and advertising and occurs when you submit a video request. See Video processing and provider retention for retention, processing locations and privacy requests. See Google’s Gemini API terms and its data-processing terms describe the applicable provider controls.

Purpose: website analytics, advertising measurement, conversion attribution, audience services, and ad delivery through Google Analytics, Google Ads, or related Google tools when enabled. Data involved: cookie and advertising identifiers, IP address and approximate location, browser and device information, referring pages, page views, interactions, ad-click information, and conversion events. Google may act independently for portions of its advertising services.

Meta Platforms

Purpose: website conversion measurement, audience services, and ad delivery through Meta Pixel or related Meta business tools when enabled. Data involved: cookie or advertising identifiers, device and browser information, page activity, and conversion events. Meta acts under its own terms for portions of its platforms and advertising services.

Changes and contact

We may update this list when providers or processing purposes change. Material changes will be reflected here and communicated when contractually or legally required. Questions about subprocessors can be sent to contact@studiomock.ai.