Sub-Processors

Last updated: August 20, 2026

Ella Software, LLC ("Ella") uses a limited number of third-party service providers ("sub-processors") to operate our platform. This page lists the sub-processors that may process customer data, along with their function, processing location, and data retention terms.

All sub-processors listed here are contractually bound to process data only as necessary to perform their services and in compliance with applicable privacy laws. We do not permit any sub-processor to use Ella customer content to train or improve AI models.

Processing takes place in the United States. Where a provider operates global infrastructure, we have configured our use for United States processing; we note below where a provider's own routing may vary.

What We Send to AI Providers

Ella limits what is transmitted to AI sub-processors to the content necessary to generate the material you request.

Ella does not transmit account credentials, email addresses, billing information, or account-profile data to any AI provider.

AI providers may receive: your prompt text, any character details you choose to provide (such as a first name or initial, age, gender, or written physical description), photos of places or objects you upload, and AI-generated images produced during the creation process.

No AI provider on this list is permitted to use this content for model training or model improvement.

Infrastructure

Amazon Web Services (AWS) — Primary cloud hosting, database storage, and file storage.

Processing location: United States (us-east-1).
Retention: For the life of your account, subject to the retention periods in our Privacy Policy.
Receives: All customer data stored by Ella, including account information, prompts, generated visual supports, and uploaded photos.

Amazon CloudFront — Content delivery network for images and static assets.

Processing location: Global edge network; origin in the United States (us-east-1).
Retention: Transient caching only.
Receives: Requests for generated images and static assets, including IP address and device information.

AI Processing

Anthropic — Claude models for text and image processing.

Processing location: United States.
Retention: Up to 30 days under standard commercial API terms.
Receives: Prompt text, character details, uploaded photos, and AI-generated images.
Training: Prohibited under Anthropic's commercial API terms.

OpenAI — GPT models for text and image processing.

Processing location: United States.
Retention: Up to 30 days for abuse monitoring under standard API terms.
Receives: Prompt text, character details, uploaded photos, and AI-generated images.
Training: Prohibited under OpenAI's API data usage policy.

Google Cloud — Gemini-class models for text and image processing.

Processing location: United States.
Retention: Zero data retention; Ella has configured its use of the Gemini API for zero retention.
Receives: Prompt text, character details, uploaded photos, and AI-generated images.
Training: Prohibited for paid Google Cloud API services.

Microsoft Azure — Limited model inference for text and image processing.

Processing location: United States.
Retention: Up to 30 days for abuse monitoring under standard Azure OpenAI Service terms.
Receives: Prompt text, character details, uploaded photos, and AI-generated images.
Training: Prohibited under Azure OpenAI Service terms.

Replicate — Image inference workloads.

Processing location: United States.
Retention: Inputs and outputs are retained transiently for the duration of the inference request and a short period thereafter.
Receives: Prompt text, character details, uploaded photos, and AI-generated images.
Training: Ella does not grant Replicate or the underlying model providers permission to use Ella customer content for model training, and does not enable any optional data-sharing features.

Business Operations

Customer.io — Transactional and product communications, including magic-link sign-in emails.

Processing location: United States (Customer.io's US data center).
Retention: For the life of your account, subject to our deletion practices.
Receives: Email address, account identifiers, and message content.

Stripe — Payment processing, subscription management, and billing notifications including renewal reminders.

Processing location: United States.
Retention: As required for financial recordkeeping and legal compliance.
Receives: Email address, billing information, and payment details. Ella does not store full payment card numbers.

Sentry — Application error monitoring and performance diagnostics.

Processing location: United States.
Retention: Per Sentry's standard retention schedule (typically 90 days for error events).
Receives: Technical error data, which may include IP address, browser and device information, and limited account identifiers.

Authentication Providers

Ella supports sign-in through Google and Microsoft. When you choose to sign in with one of these providers, Ella receives your verified email address and, where available, your name and profile image URL. These providers act as identity providers rather than sub-processors of Ella customer data — Ella does not transmit customer content to them. Their handling of your sign-in is governed by their own privacy policies.

Ella also supports magic-link sign-in, which is delivered by Customer.io as listed above.

Advance Notice of Changes

School and district customers may request advance notice of material changes to this list — including the addition of a new sub-processor or a change in processing location — by emailing hello@ella.kids with the subject line "Sub-Processor Notice." We will add you to our notification list and send notice by email before the change takes effect, or as otherwise provided in your agreement with Ella.

Where a school or district has entered into a data privacy agreement, student data privacy addendum, or similar written agreement with Ella, the notice terms of that agreement control over this section.

Questions

Ella Software, LLC
‍hello@ella.kids

‍