Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Herohero

VERIFIED

Herohero a.s. (ID 096 44 156), Mánesova 917/28, Vinohrady, 120 00 Prague 2, Czech Republic; contracting also as Herohero, Inc., a Delaware corporation

Membership platforms · Czechia
Founded 2021 · herohero.co ↗

Czech creator membership platform (Herohero a.s., Prague): flat 10% all-in fee and strong local reach, but the terms also contract through a Delaware corporation and content sits on Google Storage.

In short

Herohero, in the Membership platforms category, is operated by a US-incorporated entity and remains directly subject to the CLOUD Act.

Assessment notes

Herohero is the Czech membership platform for creators, founded in Prague in 2021 by the founders of GoOut and dominant in the Czech and Slovak market, with a flat 10% fee that includes the payment cost. The Czech company, Herohero a.s., is genuinely Czech-founded and Czech-run. The problem is what the terms say next: the agreement is with Herohero a.s. or with Herohero, Inc., a Delaware corporation, jointly and severally, with the US terms governed by the law of the State of New York. A US-incorporated entity is therefore a contracting party to the service, which is direct CLOUD Act exposure by definition rather than by inference. The named processor chain reinforces it: the privacy section names Mux (US video infrastructure), Google Storage (US object storage holding creator content), Google Analytics and Spotify, with Stripe as the sole payment processor and identity-verification provider, and the site fronted by Cloudflare: Direct. No DPA, no sub-processors list, no stated hosting region.

CLOUD ACT
OWNERSHIP
SUB-PROCS
7 · 6 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Herohero

Herohero is the Czech membership platform for creators, launched in February 2021 by Vojtěch Otevřel and Vojtěch Knyttl, previously founders of the cultural platform GoOut. It is built around paid subscriptions to a creator's feed: supporters pay monthly and get access to posts, long-form video and audio hosted on the platform, with free trials, messaging and mobile apps. In the Czech and Slovak markets it is the default answer to Patreon, and much of the country's podcasting, journalism and commentary sits there. The pricing is a single flat 10% of every pledge, which already includes the Stripe fee, and Herohero acts as merchant of record for VAT.

Read the first paragraph of the terms and the sovereignty picture changes. The agreement is between the user and Herohero a.s., the Prague company registered under ID 096 44 156, or Herohero, Inc., a Delaware corporation, described as separately and jointly the contracting party. Czech terms are governed by Czech law and US terms by the law of the State of New York. Whatever the commercial rationale, the effect for a European creator is that a US-incorporated company is party to the service agreement, which places the relationship inside direct US legal reach rather than adjacent to it. This is not a hidden sub-processor; it is on the first page of the contract.

The technical chain points the same way. The privacy section names Mux for video infrastructure, Google Storage for object storage, meaning creator content, Google Analytics, and Spotify, all US-operated except Spotify. Stripe is the sole payment processor and also runs creator identity and age verification, and the prohibited-business list is Stripe's rather than Herohero's own. The site is served through Cloudflare, and Herohero publishes no DPA, no sub-processors list, and no statement of hosting region: Direct. Best fit: Czech and Slovak creators whose paying audience is already on Herohero, where reach and a single all-in fee outweigh the jurisdictional questions. Creators picking a platform on sovereignty grounds should look at the France-hosted and Netherlands-run options in this category first.

SUB-PROCESSORS

Sub-processor map · 7

  • Cloudflare, Inc. US
    United States

    CDN and DDoS protection in front of herohero.co and static.herohero.co

  • Google Ireland Limited (Google Analytics) US
    Ireland

    Website and app analytics

  • Google Ireland Limited (Google Workspace) US
    Ireland

    Corporate and support email (from public MX and SPF records)

  • Google LLC (Google Cloud Storage) US
    United States

    Object storage for creator content; region not disclosed

  • Mux, Inc. US
    United States

    Video encoding, hosting and delivery

  • Stripe, Inc. US
    United States

    Payment processing for all pledges, plus creator identity and age verification

  • Spotify AB EU
    Sweden

    Podcast distribution integration for creator audio

6 of 7 sub-processors are US-incorporated. CLOUD Act exposure applies.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-08-10).
FEATURES

Capability matrix

Recurring memberships Yes
One-off tips No
Pay-per-post No
Members-only content hosting Yes
Digital shop No
Connect your own payment account No
VAT collected and remitted for you Yes
INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    static.herohero.co/docs…
    Open ↗
ALTERNATIVES

Alternatives in this category

Ko-fi
United Kingdom
EU-HOSTED

UK creator platform (Ko-fi Labs Limited) for tips, memberships and digital shops: 0-5% service fee, but payouts run only through PayPal, Inc. or Stripe, Inc., with no EU payment option.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
Liberapay
France · Founded 2015
EU-HOSTED

French non-profit association running an open-source recurring-donation platform: 0% platform cut, but hosted on AWS Ireland with Stripe and PayPal as the only payment routes.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
Patronite
Poland · Founded 2015
EU-HOSTED

Poland's creator membership platform (Crowd8 sp. z o.o.): 6.5% commission with Polish payment rails, Tpay and ING's Imoje, on AWS Frankfurt infrastructure.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL