# Subprocessors for FoodPerfect.ai

**Last Updated: October 16, 2026**

FoodPerfect.ai (operated by Georgy Bdoyan, operating as FoodPerfect) uses the third-party service providers ("subprocessors") listed below to run the Service. They may process personal data on our behalf. This page supports our [Privacy Policy](/legal/privacy-policy.md) and [Data Processing Addendum](/legal/dpa.md).

We choose providers for their security and data protection practices and bind them to written terms. We send each provider only the data it needs for its function. **We do not allow our providers to use your data to train their AI models.**

To be notified of changes to this list, email **privacy@foodperfect.ai** with the subject "Subprocessor updates". We give at least 30 days' notice of new subprocessors, as described in the DPA.

---

## 1. Infrastructure, Hosting, and Email

| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| **Google LLC / Google Cloud (Firebase)** | Hosting, sign-in (Firebase Authentication, including account emails for verification and password reset), database (Cloud Firestore), file storage (Cloud Storage), serverless functions, the MCP server and video rendering service (Cloud Run), secrets management, and logging | All Service data, including account data, uploads, outputs, brand data, connected account data, messages, and logs | United States |
| **Cloudflare, Inc.** | DNS, and the network proxy in front of the web app (security and delivery) | IP addresses and request details (URLs, headers) of visitors to the app | United States, with a global network |
| **Hostinger International Ltd** | Hosting of our public website foodperfect.ai, including the developer docs | IP addresses and request details of website visitors, in server logs | United States |
| **Resend (Plus Five Five, Inc.)** | Sending service emails, such as the welcome email and the low-trial-balance notice | Your email address, first name, and the email content | United States |

### 1.1 Website and App Measurement

We use this provider to measure our own websites and app. It processes data about visitors that FoodPerfect controls; it does not process the content or data you put into the Service. See Section 13 of our [Privacy Policy](/legal/privacy-policy.md).

| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| **Google LLC (Google Analytics 4)** | Counting visits to foodperfect.ai and the web app, and measuring which pages lead to sign-ups. Advertising features are off. Not used for visitors in the EU, the UK, or Switzerland | IP address (used to estimate approximate location; not stored by Google Analytics), device and browser details, pages and screens viewed, referring website and campaign tags, events such as sign-up and sign-in, random cookie identifiers | United States |

---

## 2. AI Generation

| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| **Runware Ltd** | AI inference platform for all text, image, video, and music generation: brand analysis, strategy and schedule, captions and post text, reel scripts and storyboards, classifying and drafting replies to comments and messages, image and video generation and editing, upscaling, and background removal. Routes requests to the model providers listed below | Prompts, brand and business information, website and social content collected for brand analysis, reference and uploaded images, audio from your videos for transcription, comments and messages being classified or answered, generated text, images, and video | United Kingdom; processing in the EU and US |

### 2.1 Model Providers Reached Through Runware
When you use a model developed by one of the companies below, Runware passes your prompt and reference images to that company's service to produce the output, under Runware's agreements with it.

| Model provider | Models used | Used for |
|---|---|---|
| **DeepSeek** | DeepSeek V4.1 Flash | Text: brand analysis, strategy and schedule, captions and post text, reel scripts, and classifying and drafting replies |
| **MiniMax** | MiniMax M3 (text); MiniMax video (H3) | Backup text model when the main one is unavailable; short animated shots made from your photos for reels |
| **Google** | Gemini Flash Lite | Transcribing speech in videos you upload for reels |
| **OpenAI** | GPT Image | Photos, posts, promos, menus, templates, and image editing |
| **xAI** | Grok Imagine | Food videos made from your photos and animated promo cards |
| **ByteDance** | Seedance, Seedream | Video clips and AI reel footage; some image generation |
| **Alibaba** | Qwen Image Edit | Image editing |
| **Runware** | Models hosted by Runware itself, including ACE-Step for music | Upscaling, background removal, some image editing, and background music for reels |

### 2.2 Legacy Image Model
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| **API4Midjourney** (third-party access service for Midjourney) | Legacy "unique photo" generation, still reachable through a back-end function and the MCP photo tool | Prompts and reference image links | Not disclosed by the provider. We are retiring this integration |

---

## 3. Social Publishing

| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| **Zernio Software SL** | Unified social media API: connecting Instagram, Facebook, TikTok, and LinkedIn accounts (OAuth) and WhatsApp Business, Telegram, and Google Business Profile for the inbox, holding access tokens, creating drafts, scheduling and publishing posts, publishing status webhooks, reading and answering comments, direct messages, WhatsApp and Telegram chats, and Google and Facebook reviews, comment moderation, and looking up Instagram library music | Connected account identifiers and access tokens, profile names and pictures, post content and media, publishing status, performance data, comments, direct messages, chats (including WhatsApp phone numbers), reviews and ratings, and the replies to them | Spain (EU), with its own subprocessors in the EU and US |

---

## 4. Brand Analysis and Research

| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| **Web Scraping Guy LLC (ScrapeCreators)** | Retrieving public Instagram profiles, posts, and reels for brand analysis and trend research, searching public Instagram and TikTok content by keyword, and retrieving public videos from TikTok profiles you choose | Instagram and TikTok handles and search keywords you provide, and the public profile, post, and video data returned | United States |
| **Jina AI GmbH (an Elastic company) — Jina Reader** | Reading the text of the website you ask us to analyse | The website address you provide and the public page content returned | Germany (EU) / United States |

---

## 5. Monitoring

| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| **Functional Software, Inc. (Sentry)** | Error and performance monitoring for the web app and back end, when enabled | User ID, account email, IP address, browser and device details, and error context | United States |

---

## 6. Independent Controllers (Not Subprocessors)

The following companies receive personal data from us but act as **independent controllers** under their own terms and privacy policies, not as our subprocessors:

| Company | Role |
|---|---|
| **Paddle.com Market Ltd** (United Kingdom), **Paddle.com Inc.** (United States), and their affiliates | Our reseller and Merchant of Record. They process your payment, billing, and tax data under the [Paddle Privacy Policy](https://www.paddle.com/legal/privacy) |
| **Meta Platforms** (Instagram, Facebook), **TikTok**, and **LinkedIn** | Receive the content you publish and provide account and engagement data at your direction |
| AI agents and agent platforms you connect through our MCP server or API | Receive the data you or your agent request, under their own terms |

---

## 7. Other Third-Party Services (No Personal Data)

These services support the Service but do not receive your personal data from us:

| Provider | Purpose |
|---|---|
| **Canva Germany GmbH (Pexels and Pixabay)** | Stock video search for reels. We send search keywords only |
| **Google Fonts** and the **Builder.io** image CDN | Deliver fonts and static interface images to your browser, which receives them directly (your browser shares its IP address with them) |
| **Remotion** | Video rendering software (source-available, used under the Remotion licence) that we run on our own Google Cloud infrastructure. No data is sent to Remotion |

---

*This list is effective as of the Last Updated date above.*