Effective date: October 9, 2026
Last updated: October 19, 2026
Who processes personal information for us
MLo Labs Inc. uses these providers to run VisoLab. Each handles personal information only to provide its service to us. The Data Processing Addendum and the Privacy Policy explain our commitments.
Runware (ai generation infrastructure)
- What it does: Run the image, video, audio and speech models you choose
- Information it handles: Prompts, settings and files you upload for a generation, and the generated Output
- Location: United States
Third-party AI model providers (through Runware)
- What it does: The model developers whose models you choose (names shown in the studio)
- Information it handles: Prompts, settings and files you upload for that generation, and the generated Output
- Location: Mainly the United States
Airwallex (payment processor)
- What it does: Payment processing, subscriptions, fraud screening
- Information it handles: Billing details, amounts and payment status (we never store full card numbers)
- Location: Canada/Australia
Vercel (hosting)
- What it does: Application hosting, cookieless analytics
- Information it handles: Requests to the Service, including IP address and page views
- Location: US
Neon (database)
- What it does: Database hosting
- Information it handles: Account, project, billing and usage records
- Location: US
Cloudflare R2 (object storage)
- What it does: Storage of uploaded and generated media
- Information it handles: Your uploaded files and generated Outputs
- Location: US
Google (sign-in)
- What it does: Sign-in (only if you choose it)
- Information it handles: Your sign-in request; we receive your name and email from Google
- Location: US
Resend (email delivery)
- What it does: Transactional email delivery
- Information it handles: Your email address and the message
- Location: US
Upstash (rate limiting)
- What it does: Rate-limit counters
- Information it handles: IP addresses and account identifiers in short-lived counters
- Location: US
Sentry (error monitoring)
- What it does: Error monitoring and diagnostics (no session replay)
- Information it handles: Error details and technical information such as browser and page
- Location: US or EU data centres, depending on our project region
About the AI model providers
We send each generation only to the provider that runs the model you chose, and we choose providers whose current API terms say they don't train on API inputs by default. We give the company names to business customers on request at privacy@visolab.io, and in a signed DPA.
Changes to this list
We update this page before we add or replace a provider, and give at least 30 days' notice to customers whose DPA applies, by email to the account owner. To object, see section 4 of the DPA.