| Infomaniak Network SA |
- Purpose
- Hosting: servers, database, file storage and encrypted backups.
- Data
- All data Candela stores.
- Location
- Geneva, Switzerland.
- Safeguard
- Data stays in Switzerland; data processing agreement.
|
|---|
| Anthropic PBC |
- Purpose
- The AI that writes, revises, scores and translates films (Claude API).
- Data
- Briefs, product screenshots and copy, frames of uploaded recordings, the composition being written, review notes sent for a revision. Not used for training.
- Location
- United States.
- Safeguard
- Appropriate safeguards such as the Standard Contractual Clauses (with the Swiss addendum), or the Swiss-US Data Privacy Framework where the provider is certified. Data processing agreement.
|
|---|
| Eleven Labs Inc. (ElevenLabs) |
- Purpose
- Voice synthesis for the narration.
- Data
- The narration text of a film, when a voice is used. No voice samples.
- Location
- United States.
- Safeguard
- Appropriate safeguards such as the Standard Contractual Clauses (with the Swiss addendum), or the Swiss-US Data Privacy Framework where the provider is certified. Data processing agreement.
|
|---|
| Stripe Payments Europe Ltd., Stripe, Inc. |
- Purpose
- Payments, Candela pack purchases and auto-renewals, invoices, tax calculation and payment emails.
- Data
- Company name, billing country, VAT number, the buying owner's email, the plan and the invoice items, which may name films. Stripe collects card and TWINT details itself, as an independent controller.
- Location
- Ireland and the United States.
- Safeguard
- Appropriate safeguards such as the Standard Contractual Clauses (with the Swiss addendum), or the Swiss-US Data Privacy Framework where the provider is certified. Data processing agreement.
|
|---|
| Microsoft Ireland Operations Ltd. (Microsoft 365, Exchange Online) |
- Purpose
- Email: sends Candela's emails (support questions to our team; sign-up, invitation and share-link emails; film-ready notices; billing notices such as a failed renewal or frames about to expire) from our mailbox action@candela.mov, in our Microsoft 365 tenant (Exchange Online).
- Data
- The recipients, sender and content of those emails: for a support question, the email, name, message, page and language given; for a sign-up or an invitation, the email, name, company and the link; for the other notices, the recipient's email, the film's title or the organisation's billing state. A copy stays in the mailbox's Sent Items.
- Location
- The tenant's data location (Switzerland or the EU); access for support possibly from the United States.
- Safeguard
- Microsoft Products and Services Data Protection Addendum. For any access from the United States, the Standard Contractual Clauses (with the Swiss addendum) or the Swiss-US Data Privacy Framework, under which Microsoft is certified.
|
|---|
| Google LLC (Google Fonts) |
- Purpose
- The fonts of the web pages, loaded by the visitor's browser.
- Data
- The visitor's IP address and browser details, when a page loads. No cookies, no account data.
- Location
- United States.
- Safeguard
- Appropriate safeguards such as the Standard Contractual Clauses (with the Swiss addendum), or the Swiss-US Data Privacy Framework where the provider is certified.
|
|---|
| Google LLC (Gemini API, Veo) |
- Purpose
- Generating AI shots (short video clips) with Veo, through the Gemini API. Only when AI shots are used: off by default, an owner turns them on for the organisation.
- Data
- The description of each clip and its settings (length, shape, quality). No product screens, recordings, briefs or account data. Paid tier: not used for training; Google keeps the generated clip for 2 days and logs requests for a limited time to detect abuse.
- Location
- United States; Google may process it in other countries.
- Safeguard
- Gemini API Additional Terms of Service and Google's data processing terms; appropriate safeguards such as the Standard Contractual Clauses (with the Swiss addendum), or the Swiss-US Data Privacy Framework where the provider is certified.
|
|---|