Subprocessors
Effective date: 16 September 2026
Last updated: 16 September 2026
This page lists the third-party providers ("subprocessors") that process personal data in connection with the website trendread.com and the Trendread application (the "Service").
It supplements our Privacy Policy and Cookie Policy. Terms defined in the Privacy Policy have the same meaning here. The controller responsible for these arrangements is Iaroslav Meshchanov, contactable at trendread.deal@gmail.com.
1. How we engage subprocessors
We engage subprocessors to host, secure, operate, analyse and support the Service. Each is engaged under a written agreement that requires it to process personal data only on documented instructions, to apply appropriate technical and organisational security measures, and to observe confidentiality obligations.
Some providers listed below act as independent or joint controllers rather than as our processors — principally the advertising platforms, which determine their own purposes under their own terms. These are marked in the table.
Where a subprocessor processes personal data outside the European Economic Area or the United Kingdom, the transfer safeguards described in §7 of the Privacy Policy apply — Standard Contractual Clauses, adequacy decisions including the EU–US Data Privacy Framework, or Article 49 derogations, as applicable.
2. Infrastructure and core Service
| Subprocessor | Function | Data processed | Location | Role |
|---|---|---|---|---|
| Vercel Inc. | Application hosting, content delivery, request and error logs | Technical, usage | USA / global edge | Processor |
| Supabase Inc. | Database, authentication, file storage | Account, authentication, content and inputs, usage | USA (us-east-1) | Processor |
| Cloudflare, Inc. | Network, bot and abuse protection (Cloudflare Turnstile) | Technical | USA / global edge | Processor |
| Google LLC (Google OAuth) | Authentication via Google sign-in | Authentication | USA / global | Processor |
3. Artificial intelligence and data
| Subprocessor | Function | Data processed | Location | Role |
|---|---|---|---|---|
| Google LLC (Gemini API) | Generation of Outputs from user inputs | Content and inputs | USA / global | Processor |
| ScrapeCreators | Retrieval of publicly available social media content for trend analysis | Public third-party content | USA / global | Processor |
4. Payments
| Subprocessor | Function | Data processed | Location | Role |
|---|---|---|---|---|
| LAVALANE LTD (lava.top) | Payment collection and processing, refunds, chargeback handling | Billing | Cyprus / EU | Independent controller / payment agent |
Payment card numbers, CVV codes and bank credentials are collected and processed directly by this provider. We do not receive or store them.
5. Communications
| Subprocessor | Function | Data processed | Location | Role |
|---|---|---|---|---|
| Resend | Delivery of transactional and marketing email | Account, communications | USA / EU | Processor |
6. Analytics
| Subprocessor | Function | Data processed | Location | Role |
|---|---|---|---|---|
| PostHog Inc. | Product analytics, in-product events and feature usage | Usage, technical | USA | Processor |
| Google LLC (Google Analytics 4) | Website traffic analytics | Usage, technical | USA / global | Processor |
7. Advertising
| Subprocessor | Function | Data processed | Location | Role |
|---|---|---|---|---|
| Meta Platforms, Inc. | Advertising delivery, conversion measurement, remarketing | Marketing, technical | USA / global | Independent or joint controller |
Advertising technologies are activated only where you have given consent, as described in our Cookie Policy. Meta determines its own purposes for the data it receives, under its own terms and privacy policy.
8. Changes to this list
We keep this page current and review it whenever our stack changes.
Notification. If you have a written agreement with us that requires advance notice of new subprocessors, we will give notice as that agreement provides. Otherwise, we may add or replace a subprocessor at any time, and this page will be updated to reflect the change. We recommend reviewing it periodically.
Objections. If you object to a new subprocessor on reasonable data-protection grounds, write to trendread.deal@gmail.com. We will work with you in good faith to address the concern. Where we cannot do so, your remedy is to stop using the Service and cancel your subscription in accordance with §4.5 of the Terms of Service.
9. Data Processing Agreement
Where you use the Service to process personal data for which you are the controller, a Data Processing Agreement (DPA) is available on request. Write to trendread.deal@gmail.com.
10. Contact
Iaroslav Meshchanov
Email: trendread.deal@gmail.com
For questions about how we handle personal data generally, including your rights of access, erasure and objection, see the Privacy Policy.