Last updated: 26 July 2026
InteScene Ltd uses the following third-party subprocessors to provide the Service. Each processes personal data only to deliver its stated function, under a data processing agreement with appropriate international transfer safeguards (Standard Contractual Clauses and/or the UK Addendum or IDTA; several US providers are additionally certified under the EU-US Data Privacy Framework). This page is updated when our subprocessors change; material changes are announced to account holders in advance.
| Provider | Function | Personal data involved |
|---|---|---|
| Supabase (AWS) | Database, authentication, file storage, realtime sync | All account and project data |
| Vercel | Web hosting, cookieless web analytics | IP address, page views, device information |
| Liveblocks | Real-time collaboration infrastructure | Collaborative project content, collaborator name/email/avatar, presence |
| Stripe | Payment processing and billing | Email, subscription and billing details |
| Twilio SendGrid | Email delivery (transactional and report distribution) | Recipient names and email addresses, message content incl. attached reports |
| Google Gemini API | AI content generation (opt-in features) | Prompts, scripts, breakdowns, reference images; continuity photos only with explicit consent |
| OpenAI API | AI content generation (opt-in features) | Prompts, scripts, breakdowns, availability dates |
| ElevenLabs | AI read-through audio (text-to-speech) | Script dialogue text and character names |
| Mapbox | Maps, geocoding, directions | Addresses and coordinates used in location and logistics features |
| Google Ads | Consented signup attribution | Opaque ad click identifier, trial timestamp, subscription reference. Sent only if advertising cookies were accepted on the marketing site’s consent banner. No name or email is sent. |
| Google Analytics | Usage measurement. The tag loads on every visit with all of Google’s measurement permissions denied, which sends a cookieless signal only (IP address, browser type, page and time); cookies and measurement across visits begin only after acceptance of the intescene.com consent banner or the app’s own banner, and are withdrawable in the profile’s Notifications tab, which also stops advertising conversion reporting | Pseudonymous analytics identifiers and usage events (page views, signup and trial-start events); ad personalisation always denied. No name or email is sent. |
| HubSpot | Marketing CRM (marketing opt-in only) | Name, email, country, production role, signup source |
| Sentry (EU-hosted) | Error monitoring | Error reports, technical context, IP address; session replay disabled |
| Cloudflare Turnstile | Bot protection | IP address and browser signals during challenges |
| Google Firebase Cloud Messaging | Push notifications (Cast & Crew mobile app) | Device push tokens, notification titles (never bodies) |
| Open-Meteo | Weather forecasts for shoot days | Coordinates and dates only; no account identifiers |
Questions about our subprocessors, or need this list with signed DPA references for your own records? Contact support@intescene.com. See also our Privacy Policy and Data Processing Addendum.