Service providers
The companies that help us run Mediaory and process personal data on our behalf: what they do, what data they handle and where they are.
Last updated: 9 October 2026
Transfers abroad
Every provider below is located outside Türkiye (mainly in the United States and the European Union). Personal data is transferred to them in line with Article 9 of the KVKK. You can ask which safeguard applies to a given provider: [email protected].
Railway — hosting and databases
Purpose: runs the Mediaory web application, the background workers, the PostgreSQL database and the job queue.
Data: all account and workspace data.
Location: Railway data centres outside Türkiye.
Cloudflare — object storage and bot protection
Purpose: R2 object storage holds each organization's weekly archive files (HTML and spreadsheet). Turnstile, when switched on, checks that a visitor is human on public forms.
Data: the archive files; for Turnstile, IP address and browser signals.
Location: Cloudflare's global network, outside Türkiye.
Resend — e-mail delivery
Purpose: sends service e-mails — verification, invitations, alerts, digests and archive links.
Data: the recipient's name and e-mail address and the content of the e-mail.
Location: outside Türkiye.
Anthropic — AI summaries (off by default)
Purpose: only when an operator switches AI features on; headlines and short excerpts are sent to produce summaries, sentiment and suggestions.
Data: headlines and excerpts of at most 200 characters. Your workspace content is not used to train AI models.
Location: outside Türkiye.
Google (YouTube) and X — connected accounts only
Purpose: only if you connect your account; authorization and read-only data exchange with the platform.
Data: access tokens (stored encrypted), the account identifier and the data you authorize.
Location: outside Türkiye; the platform's own terms also apply.
Payment and e-invoice providers
When paid plans start, the providers involved will be listed here before any payment is taken.
This list
We update this list before adding a provider that processes customers' personal data.