Subprocessors and Service Providers

1. About this page

This page lists the third-party service providers that ZENCRA LABS PRIVATE LIMITED currently uses to operate the Zencra Labs platform, and what each one does for us. It supports our Privacy Policy at /privacy and our Data Processing Addendum at /dpa.

We update this page when our providers change. A provider appears here once it is in use on the live platform. Services we have evaluated, configured but not switched on, or plan to add later are not listed as current providers.

Where a provider processes personal data on our behalf, we rely on the data protection terms that provider offers and we seek terms covering how it may handle that data. We do not represent that any particular form of agreement is in place with every provider; if you need the position for a specific provider, contact us at the address in section 11.

2. Why we use service providers

Zencra Labs is an AI creative platform built on top of infrastructure and AI models that we do not operate ourselves. To run your account, store your work, take payments, send messages, keep the platform secure, and produce generated output, we pass the information those tasks need to the providers below.

We share only what a provider needs to perform its function. We do not sell personal data.

3. Platform and infrastructure

• Supabase - account database, authentication, and storage of your uploads and generated files.
• Vercel - application hosting, content delivery, and performance measurement.

4. AI providers we send content to

These are the AI providers we send content to ourselves. Depending on the feature you use, that can include your prompt, an image, video, or audio file you upload, a reference image, and the settings needed to produce a result. Each provider returns the output it produces. Which of them is involved depends on the feature you use, so not every provider receives data from every account.

• fal.ai - hosting and running of the AI models we use.
• NanoBananaAPI (nanobananaapi.ai) - a third-party API service through which we run part of our image generation and image editing.
• ElevenLabs - voice and audio generation.
• OpenAI - text assistance such as prompt refinement and creative direction.

These providers may act as our processors, or as independent controllers under their own terms, depending on the provider and the service. We do not make any representation on this page about whether a given AI provider uses submitted content to train its own models; that is governed by that provider's own terms.

5. Model developers behind those providers

Many of the AI models offered on Zencra Labs are developed by one company and run for us by another. The companies below develop models we offer. We do not send your content to them ourselves. Your content goes to a provider in section 4, and may reach a model's developer to the extent that developer is involved in running its own model.

• ByteDance - image and video generation models.
• Black Forest Labs - image generation and image editing models.
• OpenAI - image generation models.
• Google - image generation and image editing models.
• Kling AI - video generation models.
• MiniMax - video generation models.
• Lightricks - video generation models.
• Sync Labs - lip sync models.
• VEED - lip sync models.
• Topaz Labs - image enhancement models.
• Recraft - image enhancement models.

We list them so that you can see whose models are involved in producing a result. Naming a developer here does not mean we have engaged it directly as our own service provider, and we do not control the terms on which a developer handles content passed to it by the provider that runs its model.

6. Communications and verification

• Resend - delivery of transactional email such as verification, password, billing, and account notices.
• Twilio - delivery and verification of one-time codes sent to a mobile number, as described in our Privacy Policy.

7. Payments

• Razorpay - payment processing, order handling, and subscription billing.

Payment card details are handled by the payment provider. Zencra Labs does not store full card numbers.

8. Sign-in providers

If you choose to sign in with an external account, that provider confirms your identity to us and shares the basic profile information you permit.

• Google - sign in with a Google account, and website analytics where we have enabled it.
• Microsoft - sign in with a Microsoft account.
• Meta - sign in with a Facebook account.

9. Security, monitoring, and analytics

• Cloudflare - bot and abuse protection.
• Sentry - error and performance monitoring, which may include technical request information.
• PostHog - product analytics used to understand feature usage and improve reliability.
• Discord - internal operational alerting to our own team.

Our cookie and similar-technology practices are described in our Cookie Policy at /cookies.

10. Cross-border processing

We are based in India. Several of the providers above operate outside India, so personal data and content may be processed and stored outside India. Where required, we apply appropriate safeguards for such transfers.

We do not offer a data residency option and we do not commit to processing or storing data in any particular country.

11. Changes and contact

We may add, replace, or remove providers as the platform develops. We update this page to reflect the providers in use, and the version and date shown above tell you when it was last revised.

A business customer that has entered into our Data Processing Addendum may object to a new provider on reasonable data protection grounds as described in that addendum at /dpa. For questions about this page, contact privacy@zencralabs.com. For contractual questions, contact legal@zencralabs.com.