Velora Studios, LLC (“Velora”) utilizes the following third-party vendors (subprocessors) to provide and support the LatchLoop application. These subprocessors process personal data on Velora’s behalf for the purposes described. Each subprocessor’s name links to its privacy policy, and the table below outlines the service provided and data storage location for each:
| Subprocessor | Description | Data Location |
|---|---|---|
| Supabase | Cloud database, authentication, and serverless function hosting for LatchLoop | United States (hosted on AWS; regional hosting available) |
| Vercel | Cloud platform hosting the LatchLoop web application and API proxy | United States (global edge network infrastructure) |
| Stripe | Payment processor for subscriptions (handles payment info and billing) | Global (data may be processed in any country; primarily U.S.) |
| OpenAI | AI language model API (used to generate content and code analysis in LatchLoop) | United States (all customer data processed on U.S. servers) |
| Microsoft Azure (OpenAI Service) | Cloud infrastructure for OpenAI models (optional alternative to OpenAI API) | Region of deployment (e.g. U.S. or EU data centers as configured) |
| PostHog | Product analytics platform (collects usage data and interactions) | United States (hosted on AWS US; EU hosting available for EU data) |
| GitHub | Source code hosting & OAuth provider (integrated for login and repo access) | Multiple – GitHub stores data in various regions, including U.S. and EU |
| ClickUp | Project management integration (user task data via ClickUp API/webhooks) | Multiple – Hosted on AWS in region chosen by user (e.g. U.S., EU) |
Last updated: May 2025. Velora carefully vets its subprocessors and enters into Data Processing Agreements as needed. We will update this page to reflect any new or changed subprocessors. If you have any questions about our third-party data processors, please contact us.