Data processing terms & sub-processors

Roles

You are the controller of the personal data contained in your recordings and articles. Knowledge Studio is the processor and acts only on your documented instructions, which are given through your use of the product.

Subject matter and duration

Processing lasts for as long as your workspace exists. Categories of data subjects: your staff and any people visible in recorded screens or source articles. Categories of data: whatever appears in the material you submit, plus account and usage records.

Security measures

• Row-level security isolating every workspace at the database level.
• Private file storage with short-lived signed links; no public buckets for customer content.
• All provider API keys held server-side; never exposed to the browser.
• Role-based access inside a workspace (owner, admin, creator, viewer).
• Audit logging of article creation, changes, exports and deletion.

Sub-processors

• Supabase — database, authentication and file storage (EU region).
• Cloudflare — application hosting and content delivery.
• ElevenLabs — speech-to-text transcription and AI narration.
• Lovable AI Gateway — language models for script, article and translation generation.
• Shotstack — video rendering.

We inform customers before adding or replacing a sub-processor that handles customer content, so you can object.

International transfers

Where a sub-processor processes data outside the EU/EEA, transfers rely on EU standard contractual clauses together with the provider's technical safeguards.

Sub-processor confidentiality

Content sent for transcription, generation, narration and rendering is processed only to return the result to you, and is not used to train the providers' models under our contracts.

Assistance, export and deletion

You can export a complete workspace and delete it from the product. On termination, content and stored files are deleted; backups age out on their normal cycle. We assist with data subject requests and incident notification without undue delay.