Radio Latte Subprocessor List
Effective date: 2026-05-21 Last updated: 2026-05-18 (v2 — extended for Mobile App subprocessors)
This list reflects the active subprocessors at the effective date above. Material changes will be reflected here with the updated effective date.
Subprocessors used across both products
| Provider | Purpose | Data categories | Location/transfer notes | Status |
|---|---|---|---|---|
| Cloudflare | Hosting (Pages), Workers AI (Llama 3.1 8B Instruct), D1 database, R2 object storage, CDN, security, Worker logs | Account/service data, IP addresses, request logs, stream/session metadata, anonymous device identifier, username, lyric/title text submitted to AI (transient — not retained on our servers), track reports, IAP redemption ledger | EU + global edge; confirm DPA and transfer terms | planned |
| Email provider (final selection pending) | Transactional email for venue login, account, support | Email address, message metadata, login links/codes | Provider not final | open |
| Email routing/provider | Support/legal email forwarding | Email address, message content | Provider not final | open |
Subprocessors specific to the Venue Service
| Provider | Purpose | Data categories | Location/transfer notes | Status |
|---|---|---|---|---|
| Stripe | Checkout, subscriptions, invoices, tax calculation, payment processing | Billing contact, payment metadata, subscription status, VAT/tax data | Stripe terms/DPA required | planned |
Subprocessors specific to the Mobile App
| Provider | Purpose | Data categories | Location/transfer notes | Status |
|---|---|---|---|---|
| Apple Inc. | App Store distribution, In-App Purchase (merchant of record), Apple Intelligence (on-device Foundation Models for lyric structuring and content safety — runs on user’s device, data does not transit Apple servers) | App Store account data (Apple-side, not visible to us), IAP receipts (Apple-issued JWS signed receipts) | Apple’s standard terms apply | active |
| Sicktempo (Radio Latte’s music-generation backend) | Generation of songs from structured lyric payloads; storage of master audio files in R2 | Opaque ticket identifier, song title, artist credit, structured lyric sections, duration, language hint — never username, device identifier, email, or other identifying information about the user | Customer-blind boundary by design; Sicktempo never sees user identity | in build |
Tools considered, not yet used
| Provider | Purpose | Status |
|---|---|---|
| Analytics provider, if any | Product analytics | Not approved unless consent + legal review is done |
| Customer support tool, if any | Support management | Not selected |
| Third-party crash reporter | Crash analytics | Not used. Apple’s standard system logs only. |
Change Notice
For B2B customers, Radio Latte provides notice of material subprocessor changes where contractually required.
For Mobile App users, material additions to the Mobile App subprocessor list will be reflected in the Privacy Policy and announced in the App Store release notes for the version that introduces them.
Required Before Launch
- Confirm exact vendors and execute DPAs where available.
- Confirm international transfer safeguards.
- Update Privacy Policy with final list or link to this page.
- Validate the customer-blind boundary with Sicktempo: verify by inspecting the live bake payload at submission time that no user-identifying field is sent.