XFilm AI

XFilm beta · Updated 2026-10-02

Providers and Model Processing

Who operates the connected services and where requested content can go.

Operator: Working Premise Labs, Inc.
1522 Western Avenue, STE 94166, Seattle, WA 98101, United States
Support and privacy: contact@workingpremise.ai

Creative models

fal serves the approved FLUX.1 [schnell] image and Wan2.2 T2V-A14B video endpoints. MiniMax Speech-02 HD narration and ElevenLabs Scribe V2 transcription use commercial APIs through fal; they are not a claim of self-hosted open-source speech. Requests send the relevant prompt or narration text, or an audio input needed for transcription. The exact active model and quote in the application control availability.

OpenAI processes approved Agent and frame-description requests, which can include prompts, selected project context and relevant images. Historical accepted jobs may retain their original provider for recovery; changing the current catalog does not silently reroute them.

fal’s API terms describe third-party processing and excluded-model exceptions. Provider terms can impose model-specific restrictions. Do not infer identical training or retention protections from a model family name or from this provider list.

Hosting, identity, media and payments

DigitalOcean hosts the application/API and the primary managed PostgreSQL database in New York. The former Supabase database is retained as a restricted read-only rollback copy pending the retention review. Cloudflare provides DNS, traffic protection, administrator access control and private R2 object storage. Clerk verifies customer sign-in identities. Stripe processes one-time credit purchases and payment/refund records. Modal runs the separate cloud rendering application and may read the media needed for an accepted render.

Sentry receives sanitized technical error reports. PostHog receives limited service-usage and financial-activity statistics associated with a derived account identifier; neither integration is configured to receive prompts, media, email addresses or authentication credentials. Their reporting projects are in the United States. Better Stack checks public endpoints and receives service-completion heartbeats. These operational providers are described further in the Privacy Notice.

These are service roles, not a promise that every provider processes all categories of data or that processing remains in one country. Media access is scoped to the relevant service operation. Providers can process necessary security, operational and billing data under their own arrangements.

Support and transparency

Support and privacy messages sent to the published contact address are processed through Google’s email service. Monitoring and operational communications may contain service status and technical diagnostic information; do not send secrets or private media into a support message unless a specific need and appropriate channel have been explained.

This list describes the beta’s connected processing routes, not a certification, endorsement or guarantee of every provider’s compliance. Review the Privacy Notice and contact us before submitting material requiring special contractual, geographic or regulated-data safeguards.

View the current catalog · Your account