VeloviaSub-processors
Last updated: April 17, 2026
Velovia engages the following sub-processors to operate the Service. Each sub-processor is bound by a written agreement that imposes data protection obligations substantially equivalent to those in our Data Processing Addendum. Where a sub-processor is located outside the EEA, UK, or Switzerland, we rely on EU Standard Contractual Clauses (with the UK International Data Transfer Addendum where applicable) or on the EU–US Data Privacy Framework where the recipient is certified.
Current sub-processors
| Sub-processor | Purpose | Data categories | Processing location |
|---|---|---|---|
| Supabase, Inc. | Primary database, authentication, file storage | Account data, Customer Content, GSC data, session tokens | AWS eu-central-1 (Frankfurt, Germany) |
| Vercel Inc. | Hosting of the marketing site and application, analytics | Request logs, aggregated usage metrics, IP address | United States and EU edge regions |
| Anthropic PBC | Large language model inference (Claude) | Prompts and generation inputs derived from your content | United States |
| OpenAI, LLC | Large language model inference (GPT) | Prompts and generation inputs derived from your content | United States |
| Google LLC | Gemini model inference, Google Search Console API, image generation | OAuth tokens you issue, GSC queries and metrics, prompts to Gemini | United States, with EU availability |
| Perplexity AI, Inc. | Large language model inference for research queries | Prompts derived from your content | United States |
| DataForSEO LLC | Keyword research and SERP analysis | Queries and domains you analyse | United States |
| Firecrawl (Mendable Labs, Inc.) | Crawling and scraping of public web pages | URLs you instruct us to crawl | United States |
| Resend, Inc. | Transactional email delivery | Email address, email content | United States |
| Functional Software, Inc. (Sentry) | Error tracking and performance monitoring | Stack traces, URL, browser information, user identifier | United States |
| Upstash, Inc. (QStash) | Background job queue and scheduled webhooks | Job payloads referencing Customer Content | AWS eu-west-1 (Ireland) or us-east-1 depending on region |
| Cloudflare, Inc. | DNS, CDN, DDoS protection, KV storage for published sites | Request metadata, IP address, cached page content | Global edge network |
| Polar Software, Inc. | Billing and payments (activated once paid plans launch) | Billing contact, transaction data | United States |
| GitHub, Inc. | Webhook and deployment integrations for customers who connect GitHub | Repository and webhook metadata you authorize us to access | United States |
Notice of changes
We update this page before adding, removing, or replacing a sub-processor. Customers on a paid plan may subscribe to updates by emailing privacy@velovia.ai with the subject “Subscribe sub-processor notices”, in which case we will also notify you by email at least 14 days before the change takes effect. You may object to a new sub-processor on reasonable data protection grounds within that period, following the process in our DPA.
Better rankings start with better pages
Connect your site. Velovia handles the rest. Two weeks free.