Legal
Subprocessors & Data Processing
When you use Creatives Content Studio to manage content for your own clients, you are the data controller and Yellow Chair Creatives, LLC acts as your processor. This page lists the subprocessors we rely on to deliver the service.
Last updated August 4, 2026 · Yellow Chair Creatives, LLC
Current subprocessors
| Subprocessor | Purpose | Data involved | Region |
|---|---|---|---|
| Lovable Cloud (Supabase) | Application hosting, database, authentication, and file storage | Account details, generated content, uploads, connected-channel tokens | United States |
| Lovable AI Gateway | Routing prompts to AI models for text, image, and transcription features | Prompt inputs, source transcripts, brand voice settings | United States |
| OpenAI | Text generation, image generation, and audio transcription | Prompt inputs and uploaded audio or video for transcription | United States |
| Google (Gemini) | Text generation for selected workflows | Prompt inputs and brand voice settings | United States |
| Stripe | Subscription billing and payment processing | Billing name, email, and payment method details held by Stripe | United States |
| Meta (Facebook / Instagram) | Publishing approved posts and retrieving engagement metrics | Post content, media, and channel access tokens you authorize | United States |
Publishing and analytics subprocessors only receive data for the channels you explicitly connect. If you never connect a channel, no content is shared with that platform.
AI providers and model training
We send prompts, source transcripts, and brand voice settings to AI providers so they can return drafts, images, and transcriptions. We do not sell your content, and we do not use your content to train our own models. We select providers whose API terms exclude customer API data from provider model training.
Changes to this list
We update this page when we add or replace a subprocessor. Customers on a paid plan who email info@yellowchaircreatives.com asking to be notified will receive advance notice of material changes before the new subprocessor begins processing customer data.
Requesting a DPA
If your organization requires a signed data processing agreement, email info@yellowchaircreatives.com with your legal entity name and the countries your data subjects are in. We will return a DPA covering confidentiality, security measures, subprocessor terms, breach notification, and deletion on termination, with standard contractual clauses where transfers require them.
For details on what we collect and how long we keep it, see the Privacy Policy and Data Deletion Instructions.