Sub-processors
Last updated 1 October 2026
These companies process personal data on our behalf to run Vesold. We have data processing agreements with each and review them before adding new ones. Subscribe to changes by emailing us; we announce new sub-processors 30 days in advance.
| Company | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| Neon (Databricks, Inc.) | Database, sign-in (Neon Auth) and storage of original photos, previews and exports; sends sign-in codes and password reset emails | All account and service data: name, email, password hash, signed-in devices (IP address, browser), photos and edits | EU: AWS Frankfurt (eu-central-1) | DPA; SCCs for any access from outside the EU |
| [VPS hosting provider] | Web application servers and editing workers | All service data while it is processed | [Region] | [DPA] |
| Google LLC (Gemini API) | AI model that chooses edits (default model) | Reduced previews, photo statistics, your requests | [US / EU] | DPA; EU-US DPF / SCCs; no training on API data |
| Anthropic, OpenAI or OpenRouter | Alternative AI models, only if enabled | As above | US | DPA; SCCs; no training on API data |
| Stripe Payments Europe, Ltd. | Payments and invoicing | Name, email, billing details | EU / US | DPA; SCCs |
| [Email provider] | Account notices (password changed, account deleted) and batch emails | Name, email, message content | [Region] | [DPA] |
| Google LLC / GitHub, Inc. | Sign in with Google / GitHub (only if you use it) | Name, email, account identifier | US | Independent controllers for their sign-in |