Current subprocessors
SceneTribe Limited remains responsible for how these providers are used. We require subprocessors to process personal data only for the services we configure and to protect that data under appropriate contractual, technical, and organisational measures.
This list is compiled from the current application codebase and production configuration points. Some providers only receive data when the relevant feature is enabled or when a user takes a specific action, such as starting checkout, uploading video, or requesting an external profile import.
SceneTribe does not send profile content, production content, account data, names, email addresses, headshots, showreels, casting data, or advanced matching identifiers to advertising platforms.
| Provider | Purpose | Data processed | Location / transfer basis | Product area |
|---|---|---|---|---|
| Stripe | Membership billing, checkout, payment processing, invoices, billing portal sessions, subscription webhooks, and customer billing records. | Account identifiers, billing contact details, subscription state, payment metadata, invoice records, and Stripe customer references. | Global provider with UK, EU, and US processing locations. International transfers are governed by Stripe contractual safeguards. | Billing |
| Resend | Transactional email delivery, email templates, delivery webhooks, contact sync, marketing topics, and audience segments. | Name, email address, account role, email preference state, message metadata, template variables, and delivery events. | Global provider. Production setup provisions the sending domain in the eu-west-1 region where supported. | |
| Cloudflare | Cloudflare R2 media storage, import broker hosting, CDN, network security, and application delivery. | Uploaded files, generated media variants, object keys, temporary access URLs, request metadata and import broker request metadata. | Global network. International transfers are governed by Cloudflare contractual safeguards. | Media storage and infrastructure |
| Mux | Video showreel uploads, transcoding, adaptive playback, thumbnails, video status webhooks, and playback delivery. | Uploaded video files, showreel metadata, upload identifiers, asset identifiers, playback identifiers, thumbnails, playback URLs, and video processing events. | Global provider. International transfers are governed by Mux contractual safeguards. | Video showreels |
| DigitalOcean | Application hosting, managed infrastructure, databases, backups, deployment support, and operational platform services. | Account data, profile data, production and casting data, application database records, request metadata, logs, backups, and diagnostic information processed by the hosted application. | Global provider. International transfers are governed by DigitalOcean contractual safeguards and its data processing agreement. | Hosting and infrastructure |
| Anthropic | Optional AI-assisted talent search query parsing when the AI search feature flag and Anthropic API key are enabled. | Search query text submitted by hirers and limited structured parsing context. SceneTribe configuration excludes headshots, showreels, voice, likeness, and creative media from this AI flow. | Global provider with international transfer safeguards. | AI-assisted search |
| OpenAI | Archive import assistance for extracting and structuring publicly available cast, creative and production information from internet sources. | Publicly available profile information and source page text used for Archive imports. SceneTribe does not send any data to this import flow. | Global provider with international transfer safeguards. | Archive imports |
| Laravel Nightwatch | Application monitoring, performance telemetry, error diagnostics, and operational observability when enabled in production. | Application telemetry, request metadata, exception details, performance traces, and diagnostic context. SceneTribe should avoid sending sensitive profile content in logs or exception context. | Provider processing locations are governed by Laravel Nightwatch terms and data processing terms. | Monitoring |
| Google Analytics | Consent-gated aggregate website analytics for SceneTribe, ShowsDB and ScreensDB, including visits and non-identifying product conversion events. | Page URL, referrer, UTM or ad click identifiers, browser and device metadata, IP address processed by the provider, consent state, and non-identifying event names. SceneTribe does not send names, email addresses, profile content, media, or search text. | Global provider. International transfers are governed by Google contractual safeguards and applicable Analytics terms. | Website analytics |
| Google Ads | Consent-gated advertising measurement on SceneTribe public marketing pages, including page view and sign-up intent conversion measurement. | Marketing page URL, referrer, UTM or ad click identifiers, browser and device metadata, IP address processed by the provider, consent state, and CTA events. | Global provider. International transfers are governed by Google contractual safeguards and applicable advertising terms. | Marketing measurement |
| Meta Business Tools | Consent-gated advertising measurement on SceneTribe public marketing pages, including page view and sign-up intent event measurement. | Marketing page URL, referrer, UTM or ad click identifiers, browser and device metadata, IP address processed by the provider, consent state, and CTA events. | Global provider. International transfers are governed by Meta contractual safeguards and applicable Business Tools terms. | Marketing measurement |
Updates
We update this page when our subprocessors materially change. Where required by our agreements or applicable law, we will provide notice before a new subprocessor is used for production personal data.
For questions about subprocessors, data protection, or a data processing agreement, contact [email protected].