Subprocessors
Last updated: 1 November 2026
These are the services that receive any part of your data when you use BrandAndGo, what each one receives, and where it processes it. Where your content is stored, and which features process it overseas, is set out on our data residency page.
Infrastructure and operations
| Service | What it does | What it receives | Where |
|---|---|---|---|
| Google Cloud and Firebase | Hosting, database, file storage, functions, secrets, logs | All of your content | Sydney (australia-southeast1) |
| Amazon Web Services | Video rendering | The images, audio and text of a video project | Sydney (ap-southeast-2) |
| Stripe | Subscription payments | Your name, email and payment details | United States |
| SendGrid | Transactional email | The recipient name, email address and the message | United States |
| MyAndGo platform | Sign-in, subscriptions, operational email | Your account records | Sydney |
| Google reCAPTCHA | Bot protection on sign-in and public forms | Your IP address and browser signals | United States |
| Google Analytics 4 | Website analytics | Pseudonymous usage events, no account content | United States |
| Pexels | Stock video search | Your search terms only | United States |
| Google News | Brand mention monitoring | Your search terms only | United States |
We hold only a customer reference with Stripe, and billing runs from the MyAndGo platform rather than from BrandAndGo directly.
AI processing, by category
We use a range of specialist AI providers and change them as the field moves, so these are listed by what the feature does rather than by vendor. Each receives only what the feature needs.
| Category | What it receives | Where |
|---|---|---|
| Text generation | Your brand profile, your prompts and your drafts | Australia (Sydney) for our primary model, overseas including the United States for others |
| Image generation | Your brand and business context in the prompt, and any reference image you supply | Overseas, on a global endpoint that pins no region |
| Video and music generation | Your script, scene prompts and brand assets | Overseas (United States) |
| Voice synthesis and voice cloning | A voice sample of a real person | Overseas (United States) |
| Talking head and photo to clip | A photograph of a real person and the matching audio | Overseas (United States) |
Some AI-powered features use a range of specialist AI providers, which may process your inputs in Australia or overseas, including the United States, and we take reasonable steps under Australian Privacy Principle 8 to protect them. Where a provider gives us the choice, we've opted out of our data being used to train its models.
A person's face and voice
The last two categories are different from everything else on this page, because what they receive is a real person: their photograph, or a recording of their voice. That is biometric information and it is processed overseas.
We record that person's permission before any of those features runs, either given by them when they send us their photos and voice, or recorded by the account holder who has it. That record can be withdrawn at any time, which stops the presenter, photoshoot, look, voiceover and video features from using them again until their permission is recorded afresh. You can ask us to delete the stored photographs, voice samples and generated material for a person through our data deletion page.
Changes
We update this page when a service is added or removed. If you need notice of changes in writing for a procurement or compliance review, ask us through our contact form.