Sub-processors
Last updated: 05/10/2026
This English version is a courtesy translation. The German version is legally binding.
This is a courtesy translation. Only the German version is legally binding.
This list names the service providers that process personal data on our behalf to operate PintroAI (recipients within the meaning of the privacy policy, Section 10). A data processing agreement under Art. 28 GDPR is in place with each of them; it is part of the respective provider's terms of business. We record changes on this page.
Processors
| Provider | Task | Location of processing | Basis for transfers outside the EU |
|---|---|---|---|
| Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland | Hosting (Azure Container Apps), database (PostgreSQL), file storage, key vault, logs and error monitoring (Log Analytics, Application Insights), email delivery (Azure Communication Services), AI (Microsoft Foundry, GPT) | EU: Netherlands (West Europe region), AI in Sweden (EU data zone) | no transfer intended; for exceptional access (support, security) standard contractual clauses and the parent company's EU-US Data Privacy Framework certification |
| Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland – processing by Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA | AI (Claude API): screens, page structure, brand details and copy for the agent, script, motion graphics and voiceover script | USA | European Commission standard contractual clauses (Art. 46(2)(c) GDPR, Modules 2 and 3), part of Anthropic's Data Processing Addendum |
| Eleven Labs Inc., 169 Madison Avenue #2484, New York, NY 10016, USA | Speech synthesis: only the voiceover script of a video and only if the voiceover is switched on | USA | EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR); in addition standard contractual clauses in the Data Processing Addendum |
| Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA | Network (DNS, delivery, TLS), protection against attacks | worldwide network, requests usually at the nearest location | EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR); in addition standard contractual clauses |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | Statistics (Google Analytics 4), only after consent in the cookie notice | EU and USA | EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR); Google Ads Data Processing Terms |
Anthropic: Anthropic does not use data from its commercial API for training. Inputs and outputs are deleted after at most 30 days; if a usage policy violation is suspected, Anthropic may retain data longer.
Microsoft Foundry: The GPT models run in a deployment with an EU data zone; inputs and outputs do not leave the EU. Microsoft does not use them for training.
ElevenLabs: ElevenLabs receives no screens and no account or contact data. The use of the data for training is switched off in our account. ElevenLabs may delete stored content after 180 days of inactivity.
Cloudflare: All requests to pintroai.com pass through Cloudflare's network. Cloudflare processes IP addresses and technical connection data to deliver the pages and fend off attacks.
Google Analytics: Only if you consent in the cookie notice. Google receives cleaned page addresses (without project IDs and access links), referrer, device and browser. Advertising features and Google Signals are switched off, data is deleted after 2 months. Details in the privacy policy, Section 3.5.
Independent controllers
These providers are not processors because they process data under their own responsibility. We list them so that you can see the complete data flow.
| Provider | Task | Location | Note |
|---|---|---|---|
| Dodope Payments Limited (Dodo Payments), 3rd Floor Crown House, 151 High Road, Loughton IG10 4LG, United Kingdom | Sale of credits as reseller (Merchant of Record), payment, VAT, invoices, refunds | United Kingdom | European Commission adequacy decision (Art. 45 GDPR); Dodo Payments' privacy notice applies. Dodo Payments receives no screens or videos. |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | Sign-in with Google (only if you choose it) | EU; transfer to the USA possible | Google's privacy policy applies. We only receive the verified email address. |
| Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland | Sign-in with Apple (only if you choose it) | EU; transfer to the USA possible | Apple's privacy policy applies. We only receive the verified (possibly relayed) email address. |
Change log
| Date | Change |
|---|---|
| 29 September 2026 | First version (Microsoft, Anthropic, Cloudflare) |
| 1 October 2026 | ElevenLabs (speech synthesis) added |
| 2 October 2026 | Payment provider added as independent controller |
| 3 October 2026 | Microsoft Foundry added; for EU customers Anthropic's contracting party is Anthropic Ireland, Limited; transfer bases clarified |
| 4 October 2026 | Reseller changed: Dodope Payments Limited (Dodo Payments) instead of the previous provider |
| 4 October 2026 | Sign-in with Google and Apple added as independent controllers |