Legal
Sub-processors
The companies we use to run Mondovo, what each one does, and what reaches it. If you are an agency completing a client's supplier review, this is the page to send them.
Last updated: 9 September 2026
1. How to read this page
A sub-processor is a company that processes personal data on our behalf so that the service can work. Every one of them is bound by a contract that limits what it may do with that data to what we ask of it.
Two things narrow this list. A provider only appears if personal data can actually reach it, so services that receive nothing but a URL or a search term are not listed. And several entries are used only when you switch something on — those are marked.
2. Running the platform
| Provider | What it does | What reaches it |
|---|---|---|
| Vercel | Runs the Mondovo application | Anything you send to or read from the application, and server logs |
| Supabase | Database and sign-in | Account details, your sites and their content, contacts and form submissions |
| Cloudflare | Stores images and files, serves published sites, manages domains | Uploaded and generated media, published pages, and the requests visitors make to them |
3. Billing and email
| Provider | What it does | What reaches it |
|---|---|---|
| Stripe | Takes payments and runs subscriptions | Billing contact details and payment records. Card numbers go directly to Stripe and never reach us |
| Resend | Sends email — account, notification and, if you use the outreach tools, campaign email | Recipient addresses and the content of the message |
4. Generating and refining designs
These providers receive the material a design is generated from: the brief, the content, reference images, and the instructions you type or speak. Which one handles a given request depends on the kind of work — we route between them for quality and cost.
| Provider | What it does | What reaches it |
|---|---|---|
| Generates and refines designs, content and classifications | Briefs, site content, reference images, instructions | |
| OpenAI | Generates and refines designs and content | Briefs, site content, instructions |
| Anthropic | Generates and refines designs and content | Briefs, site content, instructions |
| xAI | Generates and refines designs and content | Briefs, site content, instructions |
| OpenRouter | Routes requests to the model best suited to them | The same material, passed through to the provider it selects |
| Replicate | Generates and edits images and video | Image prompts, and images you supply for editing |
We do not use your content, or your clients' content, to train models of our own.
5. Understanding and fixing the product
| Provider | What it does | What reaches it |
|---|---|---|
| PostHog | Product analytics and session replay of the Mondovo application | How you use the application, and recordings of those sessions, used to reproduce faults |
This covers your use of Mondovo itself. It does not record visitors to the sites you publish.
6. Only when you switch them on
These receive data only if you connect the feature they belong to. If you never use it, nothing reaches them.
| Provider | Used for | What reaches it |
|---|---|---|
| Meta | WhatsApp and Instagram messaging on a site you publish | The messages exchanged, and the sender's messaging identity |
| Sign-in with Google, and Search Console or Analytics connections | The identity of the account you connect, and the reports you ask us to read | |
| Firecrawl | Reading an existing website you ask us to redesign | The address you give us and the public content at it |
7. Changes to this list
We update this page when a provider is added or removed, and the date at the top is the version you are reading. If you need to be told in advance of a change, ask us when you request a data processing agreement and we will add you to the notification list.
Contact
Questions about this list, a supplier review, or a data processing agreement:
Mondovo, Inc. 10685-B Hazelhurst Dr #12282 Houston, Texas 77043 United Statesprivacy@mondovo.com