Sub-processors

Purpose: Website hosting, server functions, technical logs and cookieless page-view statistics (Vercel Web Analytics).

Data: IP address, request metadata, technical logs; aggregated page-view statistics without cookies.

Purpose: Storage of uploaded images and results, deleted within 24 hours.

Data: Uploaded images and results (which may show people), file names.

Purpose: GPU servers that run the image models.

Data: Uploaded images while they are processed, and the results.

Purpose: Database for accounts, plans, credit usage, job records and abuse-prevention hashes.

Data: Account identifiers and email address, plan and billing status, job metadata (file name, tool, time, status, credits), keyed hashes of IP addresses and device identifiers.

Purpose: Sign-up, sign-in, sessions and account emails.

Data: Email address, login details, session data, IP address and browser information.

Purpose: Payments, subscriptions, invoices, tax calculation and the billing portal.

Data: Name, email address, billing address and country, payment method details, transaction history.

Stripe acts as an independent controller for some payment data under its own privacy policy.

Purpose: Website usage statistics.

Data: Pseudonymous identifiers in cookies, pages visited, device and browser information, approximate location.

Only after a visitor accepts analytics cookies. Never used on uploaded images.

PhotoRescue is operated from Brazil. The providers above may process data in the United States and other countries. Transfers are covered by the safeguards described in our privacy policy (section 6) and, for business customers, in our Data Processing Agreement (section 12).

We update this page at least 14 days before a new sub-processor starts processing customer personal data, except where a replacement is urgently needed for security or to keep the service running; in that case we update it as soon as possible.

Business customers who want to be told about changes by email can ask at support@photo-rescue.com with the subject "Sub-processor updates". The right to object is described in section 6 of the Data Processing Agreement.