creavio SUB-PROCESSORS
Last Updated: October 12, 2026
creavio, Inc. engages a limited set of vetted third-party sub-processors to help operate the Platform, across infrastructure and hosting, payments, messaging, AI features, search and analytics, media processing, error monitoring, writing checks for creavio write (plagiarism search and AI-written-text detection), and the social, advertising, and business-platform integrations a Creator or Agency chooses to connect. Each sub-processor receives only the data necessary to perform its function, except that Copyscape receives whatever text a creavio write user selects and checks, including any personal information in it. Each is bound by the data-protection terms of a written contract with creavio, except Copyscape, which provides both writing checks for creavio write on its standard terms; those terms do not include the data-protection terms of our Data Processing Addendum, as explained in Section 5.4 of that addendum.
WRITING CHECKS FOR CREAVIO WRITE
Copyscape (Indigo Stream Technologies Ltd.) is our only provider of plagiarism search and AI-written-text detection. It receives the text a user selects, up to 50,000 characters, only when the user clicks Check, and only for the checks the user picks. It does not receive the user's name, email address, or the site the text came from. Copyscape has told us in writing that it keeps the text for 14 days and then permanently deletes it, does not use it to improve its service or train algorithms, and does not add it to any index used to check other people's text. Copyscape staff can access the text during those 14 days. For the plagiarism check, Copyscape uses Google as a search provider, so the text, or parts of it, is searched through Google; Copyscape has not told us exactly what it sends to Google. Copyscape has not signed a data processing agreement with creavio, and no contract between creavio and Copyscape contains the terms California law requires of a service provider, so under California law it is a third party, not a service provider (see Section 4 of our Privacy Policy). Copyscape has not said where it processes the text. For a transfer of that text from the EEA or the United Kingdom, we rely on your explicit consent, given when you tick Allow originality checks (GDPR Article 49(1)(a)), after you are shown these words: "It has not told us which countries it processes text in. If that is outside the US, the EU or the UK, there may be no legal finding that the country protects data adequately and no contract safeguards for your text." Do not run either check on text that contains personal information about anyone.
REQUESTING THE FULL LIST
The current, itemized list of sub-processors, including each sub-processor's name, location, and processing purpose, is available to customers on request under a Data Processing Addendum (DPA) or NDA. To receive it, email
[email protected] from the email address on your account. See our DPA at creav.io/legal/dpa.
CHANGES
creavio maintains a current sub-processor list and will notify affected customers at least 30 days before a new sub-processor takes effect, giving you the opportunity to object. To object to a new sub-processor, email
[email protected] before the effective date.
CONTACT
Privacy inquiries:
[email protected]Security inquiries:
[email protected]