Reelfox
Start for free

List of Processors and Recipients

As of 26 October 2026

This list supplements our Privacy Policy. It names all service providers that process personal data for Reelfox and states the purpose, the data, the legal basis and the safeguards for transfers outside the European Union. If the list changes, we update this page and the date above.

Roles: A processor processes data only on our instructions under a contract pursuant to Art. 28 GDPR. An independent controller decides on purposes and means itself and has its own privacy policy.

Third countries: For the USA, the EU Commission has adopted an adequacy decision for companies certified under the EU-U.S. Data Privacy Framework (DPF). Where a company is not certified, we base the transfer on the EU Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914). We checked the information on DPF, Standard Contractual Clauses and training on 26 October 2026 against the providers' terms, data processing agreements and DPF statements.

Overview

Provider Purpose Role Place of processing Third-country safeguard
Hetzner Online GmbH Hosting of the entire application: website, app, database, queue, assembly of the videos, file storage, backups Processor Germany not required
STRATO GmbH Mailbox hallo@reelfox.de: sending system emails, receiving your emails Processor Germany not required
Stripe Payments Europe, Limited Payments, subscriptions, invoices, customer portal, payment field on the order page partly independent controller, partly processor Ireland, USA DPF according to provider, plus Standard Contractual Clauses
Anthropic Ireland, Limited Script, scene plan Processor Ireland, USA Standard Contractual Clauses
Features & Labels Inc. (fal.ai) Images, video clips, lip sync Processor USA Standard Contractual Clauses
Eleven Labs Inc. (ElevenLabs) Voice-over, timestamps for captions Processor USA DPF according to provider, plus Standard Contractual Clauses

Details

Hetzner Online GmbH

  • Address: Industriestr. 25, 91710 Gunzenhausen, Germany
  • Purpose: Operating the server we rent in a data centre in Germany on which the entire application runs: website and app, database (PostgreSQL), job queue (Redis), assembly of the videos (Remotion with Chrome and ffmpeg) and file storage for videos, images, audio tracks and uploads (S3-compatible, operated by us, reachable at s3.reelfox.de).
  • Data: all data stored in Reelfox, including account data, session data with IP address and browser identifier, inputs, blueprints, credit ledger, your media and uploads, technical error logs; on retrieval of media, IP address and technical data.
  • Legal basis of our processing: Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (secure operation).
  • Third country: none. Processing takes place in Germany.
  • Backups: Hetzner backs up the entire server daily and keeps each backup for seven days. The nightly database backup is stored on the same server and deleted after 14 days. We do not use any other provider for backups.
  • Agreement: data processing agreement pursuant to Art. 28 GDPR with Hetzner.

STRATO GmbH

  • Address: Otto-Ostrowski-Straße 7, 10249 Berlin, Germany
  • Purpose: Mailbox hallo@reelfox.de. Sending system emails (email confirmation, sign-in link, password reset, contract, cancellation and withdrawal confirmations, account notices) and receiving the emails you write to us. Our server hands the emails over via SMTP in encrypted form to STRATO's mail server (smtp.strato.de), which delivers them.
  • Data: email address, name, content of the email, delivery logs.
  • Legal basis: Art. 6(1)(b) and (c) GDPR; for enquiries not related to a contract Art. 6(1)(f) GDPR.
  • Third country: none. STRATO states that it processes data exclusively in data centres in Germany. There is no open or click tracking.
  • Agreement: data processing agreement pursuant to Art. 28 GDPR, which according to STRATO forms part of the contract terms for contracts concluded from 18 July 2022.

Stripe Payments Europe, Limited

  • Address: 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
  • Purpose: payment field on the order page (Stripe.js), subscriptions, credit packs, invoices, customer portal, fraud prevention.
  • Data: name, email address, billing address, payment data, plan and purchase details; on the order page IP address, device and browser data and the cookies __stripe_mid and __stripe_sid; an internal Reelfox customer ID.
  • Role: Stripe is an independent controller for payment processing, fraud prevention and its own legal obligations. For other billing services, Stripe acts as a processor.
  • Legal basis: Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (tax and commercial law obligations), Art. 6(1)(f) GDPR (fraud prevention).
  • Third country: transfer to Stripe, LLC in the USA. Stripe states that it is certified under the DPF and refers to its entry on the DPF list. In addition, Stripe's data processing agreement contains the Standard Contractual Clauses (Modules 1, 2 and 3).
  • Agreement: Stripe's standard terms and Stripe's data processing agreement (Stripe DPA), which forms part of the terms.

Anthropic Ireland, Limited

  • Address: 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland. Sub-processors include Anthropic, PBC, USA.
  • Purpose: Turning your idea into a hook, script and scene plan. The model refuses requests that violate Anthropic's usage policies.
  • Data: your inputs (idea, script, change requests), texts from a website you provide, details from your brand kit where needed for the video. We do not transmit your name, email address or payment data.
  • Legal basis: Art. 6(1)(b) GDPR.
  • Third country: USA. We are not aware of a DPF certification. Safeguarded by the Standard Contractual Clauses (Modules 2 and 3) in Anthropic's data processing addendum.
  • Training: Under its commercial terms, Anthropic may not train models on customer content.
  • Agreement: Anthropic's Commercial Terms of Service with the Data Processing Addendum, which forms part of the terms.

Features & Labels Inc. (fal.ai)

  • Address: 2261 Market St. Suite 10467, San Francisco, CA 94114, USA
  • Purpose: Generating images and video clips, lip sync for presenter videos. The models run with the safety filter switched on.
  • Data: image and video instructions, uploaded images (for example a photo for the presenter video, a logo), audio track for lip sync.
  • Legal basis: Art. 6(1)(b) GDPR.
  • Third country: USA. We are not aware of a DPF certification. Safeguarded by the Standard Contractual Clauses (Module 2) in fal.ai's data processing addendum.
  • Training: fal.ai processes inputs to provide its services. It may only use data derived from them in anonymised or aggregated form to develop its own services and models.
  • Retention at fal.ai: We switch off storage in fal.ai's request history for every request. Generated and uploaded files are deleted at fal.ai after one hour. We transfer all results to our own server immediately.
  • Agreement: fal.ai's terms of service with the Data Processing Addendum, which forms part of the terms.

Eleven Labs Inc. (ElevenLabs)

  • Address: 169 Madison Ave #2484, New York, NY 10016, USA
  • Purpose: Voice-over of the script and per-word timestamps for captions.
  • Data: script text, selected voice.
  • Legal basis: Art. 6(1)(b) GDPR.
  • Third country: USA. ElevenLabs states that it is certified under the DPF. In addition, ElevenLabs' data processing addendum contains the Standard Contractual Clauses.
  • Training: Under its terms of use, ElevenLabs may use content to improve its services and models unless the customer objects in its account settings. Only the script text is sent to ElevenLabs, no details about you.
  • Agreement: ElevenLabs' terms of use with the Data Processing Addendum, which applies to customers accepting the terms on behalf of a business.

Further recipients

  • Our bank: account holder, IBAN, amount and payment reference for payouts in the partner program.
  • Tax advisers and tax authorities: settlement documents where necessary.
  • German Federal Central Tax Office (Bundeszentralamt für Steuern): confirmation of VAT identification numbers in the partner program.

Contact

Questions about this list: hallo@reelfox.de