Sub-processors

This page lists the third-party providers we engage to help us run the metatrix.ai service (the “Service”). We publish it so you always know who may process personal information on our behalf, where, and for what purpose. It should be read together with our Privacy Policy and our Data Processing Addendum (DPA), which sets out the contractual terms that govern these providers. metatrix.ai serves a global audience and runs as a fully serverless AI platform, so the providers below are the infrastructure that delivers Max chat, media generation, real-time voice and video, sign-in, and data storage.

1. What a sub-processor is

A sub-processor is a third party that processes personal information on our behalf to run the Service. Metatrix Labs is the party that decides why and how your personal information is used (the controller), and each sub-processor acts only on our documented instructions to provide a specific piece of infrastructure — for example, running an AI model, storing a file, relaying a live call, hosting a page, or holding your account record. Every sub-processor is bound by a written agreement that requires it to protect your information, use it only to provide its service to us, and apply appropriate security safeguards.

2. Our sub-processors

The table below lists every sub-processor we currently use, the role each one plays, the personal information it may handle, and where it processes that information.

Sub-processor	Service / role	Data handled	Location
Cloudflare	AI inference — the Max chat model, image model, and vision model; media storage; real-time video & voice relay	Prompts, images, camera frames, generated media, connection & log data	Global edge, incl. United States
fal.ai	Video, 3D & upscale generation	Prompts and images	United States
Vercel	Hosting / front-door + the sandboxed terminal	Request, log & IP data; terminal input and output	United States
Supabase (on AWS)	Database — accounts, creations, and app data	Email, creations, session id	Canada, ca-central-1
Google	OAuth sign-in	Email, Google account ID	United States / global

3. We do not sell your data

We do not sell your personal information, and we use no advertising networks. The providers above are engaged solely to operate the Service. None of them is authorized to use your information to build advertising profiles, to sell it, or to serve you ads, and we do not share your information with data brokers or ad networks.

4. International transfers

Because some of these providers process information outside Canada — principally in the United States and across a global edge network — your personal information may be transferred internationally when you use the Service. Wherever it is processed, we protect it as follows:

• PIPEDA — every sub-processor is bound by contract to provide a comparable level of protection to the personal information it handles, consistent with Canada’s federal Personal Information Protection and Electronic Documents Act.
• Quebec Law 25 (section 17) — before transferring personal information outside Quebec, we carry out the privacy assessment required by section 17 of Quebec’s Act respecting the protection of personal information in the private sector, taking into account the sensitivity of the information, the safeguards in place, and the legal framework of the destination.
• EU / UK — where personal information of individuals in the European Economic Area or the United Kingdom is processed, we rely on the Standard Contractual Clauses (and the UK Addendum, where applicable) to legitimize the transfer.

5. Changes & notice

We may add a new sub-processor or replace an existing one as the Service evolves. When we do, we give advance notice before the new or replacing sub-processor begins processing personal information, and we update the table above. To be notified of changes — or to object to a new sub-processor on reasonable data-protection grounds — email support@metatrix.ai. If we cannot address a well-founded objection, you may stop using the affected feature or close your account as described in our Privacy Policy.

6. Contact

Questions about this list, our sub-processors, or how we protect your information can be sent to support@metatrix.ai. For how we handle personal information generally, see our Privacy Policy; for the contractual terms that govern our processors, see our Data Processing Addendum.