← Back to SolidFrame

Subprocessor and Third-Party Provider Disclosure

Effective date: 31 August 2026

This notice describes the categories of providers that may receive data when SolidFrame Studio is used. It supplements the Privacy Policy and, for business customers, the Business Data Processing Addendum.

1. Roles

AG PLUS LLC is the seller and merchant of record. It uses payment, acquiring, banking and fraud-prevention providers for checkout, payment, refunds and compliance.

Solidframe Technologies OÜ owns and operates the technical platform. It uses infrastructure and selected AI/media providers to host, secure and perform requested Service operations.

A provider may act as a processor, subprocessor or independent controller depending on the data and its legally required activities. The provider’s own notice applies to its independent processing.

2. Payment and transaction providers

Joint-stock commercial bank “Kapitalbank” (“Kapitalbank” JSCB), Republic of Uzbekistan is AG PLUS’s confirmed banking and acquiring payment partner for payment settlement and refunds. Public bank details: TIN 207275139; MFO 01158; SWIFT KACHUZ22; registered address 7 Sayilgoh Street, Yunusabad district, Tashkent 100047, Republic of Uzbekistan; website https://kapitalbank.uz.

Kapitalbank may process payment credentials, billing details, device and fraud signals, payment status and transaction references for authorisation, settlement, refunds, card-network compliance and regulatory duties. Where the payment flow also uses a separate gateway, wallet, card-network participant or other technical processor, that participant must be identified at checkout before personal or payment information is submitted and added to this disclosure once confirmed. The checkout must also show the applicable card or bank-statement descriptor.

3. AI and media-processing providers confirmed in the Service catalogue

Only the provider selected for an operation, and only the content reasonably necessary for that operation, should receive the relevant prompt or media. Current catalogue providers may include:

  • xAI — image and video generation;
  • OpenAI — image generation and related AI processing;
  • Google — image and video generation;
  • Runware — image generation and media-processing access;
  • ModelsLab — image generation;
  • HeyGen — avatar, video and lip-synchronisation processing;
  • Sync Labs — lip-synchronisation processing;
  • ElevenLabs — speech, music and sound generation; and
  • fal — hosted image, audio, video and synchronisation model access.

Availability changes over time. The tool selector in the Service is the current operational source for the provider used for a particular task. A provider may apply its own safety rules and process limited logs needed to prevent abuse and operate its service.

4. Infrastructure categories

Solidframe may use providers for:

  • cloud hosting and compute;
  • database, object storage and backup;
  • content delivery, network security and denial-of-service protection;
  • identity, authentication and transactional email;
  • error monitoring, logging and technical support; and
  • optional analytics activated in accordance with the Cookie Policy.

Names, processing locations and transfer safeguards must be added to the production version of this disclosure after the deployment inventory is confirmed. No vendor should be listed solely on assumption.

5. Professional and legal recipients

AG PLUS and Solidframe may disclose limited data to auditors, accountants, legal advisers, insurers, banks, tax authorities, courts, regulators or law-enforcement bodies where necessary and lawful. These recipients may act as independent controllers under professional or statutory duties.

6. International transfers and safeguards

Providers may process data outside the user’s country. Restricted transfers will use an applicable adequacy decision, Standard Contractual Clauses, another approved mechanism or a legally permitted derogation, with supplementary safeguards where appropriate. Uzbekistan localisation and transfer requirements will be followed for data within their scope.

7. Provider changes

This notice will be updated when a material provider or processing purpose changes. Business customers using the DPA may request material Subprocessor update notices by contacting info@solidframe.io. Any objection must be based on reasonable data-protection grounds and submitted within the period stated in the DPA.

8. Contacts and language

Questions about platform providers: info@solidframe.io. Questions about payment, billing or AG PLUS providers: info@4teen.me.

This notice is issued in English. A Russian translation may be provided for convenience. If the translations differ, the English version prevails, subject to mandatory law.