Trust
Service providers & sub-processors
Rerato, Inc. may use the providers below when delivering Trivana. A provider receives only the data needed for the feature you use; not every provider applies to every customer or interaction. This register supports privacy and customer diligence. It is not a description of Trivana's internal network design or security controls. Last updated November 2, 2026.
| Provider | Service role | Data categories |
|---|---|---|
| Supabase | Account and core application services | Account details and service content, including Learn participant and response records when those features are used. For a personalized facilitator based on the customer, consented reference photographs and, only when the customer separately chooses voice cloning, their consented voice recording are held in private application storage. For Trivana Moments: drafts, briefs (names, relationships, interests, memories), friends' contributions, adults-only photos, orders, host scripts and show media, with photos and media in private storage |
| Vercel | Application hosting, delivery, and aggregate site and performance measurement | Request metadata and application content submitted to or returned by the hosted service; public page-view dimensions and Web Vitals performance measurements |
| Cloudflare | Network and media delivery, bot protection, and optional AI traffic routing | Request and security metadata; generated audio, video, and images; prompts, prepared scripts, and generated output when AI Gateway is enabled; Trivana Moments pages and show media in transit |
| ElevenLabs | Generated voice and optional customer voice creation | Prepared script text approved by the customer. For the optional cloned-voice personalized-facilitator path, a voice recording made by the individual for that request after explicit v2 consent. The default self-based path uses a licensed Trivana voice and sends no customer recording. Not intended to receive Learn participant response records. For Trivana Moments: the host script, which includes the names and memories in the organizer's brief and chosen friends' words |
| Runway | Generated facilitator media and customer avatar creation | Prepared facilitator scripts and host media. For a personalized facilitator, consented reference photographs of the individual or a customer-approved fictional-character design brief that depicts no real person. Not intended to receive Learn participant response records. For Trivana Moments: the host script and the host's generated voice audio, used to make the host's video |
| Sign-in and AI-assisted content generation | OAuth identifiers and basic profile information when Google sign-in is used; source content, prompts, and generated output when a supported Google model is used. For Trivana Moments: the brief, friends' contributions, questions and host scripts for writing and review (Vertex AI) | |
| Amazon Web Services | Background processing that prepares Trivana Moments shows, in the United States | The order and media identifiers, questions and host scripts, which include the names and memories in the organizer's brief and chosen friends' words, the host's generated voice audio and video, and the organizer's email address for the emails about their show, while a show is voiced, filmed, checked and released |
| Anthropic | AI-assisted content generation and review | Source content, prompts, and generated output when a Claude model is used, including as a fallback. For Trivana Moments: the brief, friends' contributions, questions and host scripts for review, and for writing when Google's models are unavailable |
| OpenRouter | AI model routing | Source content, prompts, and generated output when model routing or a fallback is used. For Trivana Moments: the show's generated voice audio and video, with its questions and host script, for review; and the brief, friends' contributions, questions and host scripts when a fallback is used |
| OpenAI | Content moderation, optional transcription, and AI-assisted generation | Submitted text for moderation, including Trivana Moments briefs, friends' contributions and host scripts; source audio for transcription; source content, prompts, and generated output when an OpenAI model or fallback is used. For Trivana Moments: questions and host scripts, which include names and memories, for review and writing when it is the fallback |
| Microsoft Azure OpenAI | Optional AI-assisted content verification | Source-derived questions, answer choices, evidence text, prompts, and verification output when Azure verification is enabled |
| Google Firebase | Mobile push delivery, app-installation services, and optional mobile analytics and crash diagnostics | Push tokens and app-installation metadata; consented mobile usage and diagnostics where enabled |
| Dodo Payments | Merchant of record, billing, tax and refunds for purchases processed through Dodo before October 30, 2026; retained records only since | Billing contact and transaction metadata for the products purchased through Dodo |
| Stripe | Payment processing, tax calculation and billing records for purchases, on behalf of Rerato, Inc. | Billing contact and transaction metadata, including Trivana Moments orders and retained payment, subscription and refund records |
| Resend | Transactional and notification email | Email address and message content, including Trivana Moments order, review and ready emails to the organizer |
| HubSpot | Customer relationship management, sales communications, and consented public-site visitor attribution | Prospect and customer contact, organization, workshop, message, deal, and email-engagement records; after optional consent on eligible public pages, IP address, online visitor identifiers, timestamps, and visited page paths. Not intended to receive Learn participant response records |
| PostHog | Operational and product analytics | Pseudonymous account, project, cohort, session, and attempt identifiers; participation, completion, score, duration, purchase, and operational events; browser analytics only where consent applies |
| Sentry | Error and performance monitoring | Error diagnostics, request metadata |
| Inngest | Background workflow orchestration | Workflow identifiers and the contact, message, booking, or operational payload needed when an enabled background workflow runs |
| Cal.com | Optional meeting scheduling | Booking contact details, scheduling preferences, and meeting metadata when a visitor chooses to book |
Buyers should not place participant personal data in source material, prompts, or facilitator scripts unless a written scope expressly permits it. Prepared content can be processed by the generation providers that apply to the selected feature.
Personalized facilitator materials. For a Personalized Facilitator Setup already purchased, we process submitted materials only to build and operate the facilitator for that customer's purchased Trivana Learn programs. The default self-based path sends consented reference photographs to the avatar provider and uses a licensed Trivana voice, so it requires no voice recording. A customer may instead separately choose a cloned voice; that path requires explicit v2 voice consent and a recording made by the signer for that request. The fictional-character path accepts no real person's photographs or voice recording.
We do not use these materials for another customer or in Trivana marketing. The authorization is purpose-limited and revocable in writing at support@trivana.ai. Revocation stops new production with that facilitator, and a deletion request may be submitted through the same address. This summary does not promise a deletion schedule or make claims about a provider's model-training practices.
HubSpot generally acts as a processor or service provider for CRM records. Under HubSpot's current terms, it may act as a separate controller for tracking-code data if Intent data access or enrichment products are enabled. See HubSpot's Data Processing Agreement and Privacy Policy.
This page is the public summary, not a substitute for the applicable provider terms or a signed Data Processing Addendum. Customers can request the current legal entity, processing-location, transfer, or security information needed for diligence. Questions about a specific provider or a DPA? support@trivana.ai.