Subprocessors
Every third party that can receive your data when you use Horoptic, what each one receives, and which are not yet active.
Scope
This page lists the third-party services (“subprocessors”) that can receive data when you use Horoptic. It is a factual disclosure derived from what the product actually calls — not a summary of intent.
The most important line first: the manual editor is free, offline, and account-less. Your projects, your media, and your edit history live on your device. If you never sign in and never promote a project to the cloud, nothing on this list receives anything about you. Every entry below is reached only after you take a deliberate action — signing in, promoting a project, approving a generation, or buying a plan.
Formal corporate entity names, processing locations, and links to each provider’s data-processing terms are completed as part of the legal review before this document takes effect.
Infrastructure
| Service | What it can receive | When |
|---|---|---|
| Cloudflare | Account records, sign-in sessions, cloud-synced project op-logs, generated and rendered media, and this website’s traffic. Horoptic’s control plane, database, object storage, and site hosting all run here. | On sign-in, and for any project you promote to the cloud. |
| Fly.io | Media and job parameters submitted for server-side rendering or generation. This is the isolated worker that runs ffmpeg and calls the model providers. | When you render a master server-side or approve a generation. |
AI and generation providers
These are called server-side only, and only for the single request you asked for. Your media library is never handed over wholesale — but be aware that some features do, by their nature, send your own footage or audio to a provider, and those are called out explicitly below. Provider API keys stay on the server; they are never shipped to your machine.
| Service | What it can receive | When |
|---|---|---|
| Anthropic | Your instructions to the AI Director, plus a summary of your timeline. That summary is mostly structural (clips, tracks, timings), but where a clip has been transcribed it also includes an excerpt of the actual spoken words — currently capped at 600 characters per clip in focus — so the Director can reason about what is being said. | Only while you are using the AI Director. |
| Generation prompts and any reference images you attach. Separately, the “Analyze footage” feature sends sampled frames from your own source video to a Google vision model in order to describe the shot. | When you approve a generation, or run “Analyze footage” on a clip. | |
| fal.ai | Generation prompts plus any reference or source media the selected engine needs. fal.ai hosts several third-party models used by Horoptic, including video generation and video upscaling. Transcription also runs here: Horoptic gives fal.ai a temporary link to the media you chose, and the provider fetches it to extract the audio track. | When you approve a generation or a transcription. |
| ElevenLabs | The text to be spoken and the chosen voice settings, for voice generation. (Speech-to-text uses an ElevenLabs model reached through fal.ai — see the fal.ai row above for what that sends.) | When you approve a voice generation. |
Communications and payments
| Service | What it can receive | When |
|---|---|---|
| Resend | Your email address, to deliver sign-in codes and invitations. | When you request a sign-in code or receive an invite. |
| Our payment provider | Billing identity and payment details, handled directly by the provider. Horoptic never receives or stores your card details. | Not yet active — no payments are being taken during the closed beta. |
Integrated but currently inactive
Listed so this page is complete rather than merely current. Neither receives anything today.
- PostHog — privacy-friendly, EU-hosted product analytics for this marketing site. It is switched off: no analytics key is configured, so nothing is loaded or sent, and no consent banner is shown. If it is ever enabled it runs only after you explicitly opt in, and it is limited to page metadata — never your prompts, media, or timeline.
- Sentry — error and crash monitoring. Integrated but inert; no reporting endpoint is configured, so no error reports leave the app.
Not used
For the avoidance of doubt, Horoptic does not use advertising networks, data brokers, session-replay tools, or third-party tracking pixels. This marketing site sets no cookies at all.
Changes
New subprocessors are added to this page before they begin processing data. Once this document takes effect, material additions will be announced to account holders in advance.