PicPost uses the service providers below to run the Service. Each processes only the information it needs for its role. This list matches Annex III of our Data Processing Addendum. We will update this page at least 30 days before adding a new subprocessor that processes customer personal data, as described in the DPA.
| Subprocessor | What it does for PicPost | Information processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Website and app hosting, network security, photo storage (R2), application runtime (Workers), and the automated photo safety check (Workers AI) | All information sent through the Service; stored photos | United States (global network) |
| Supabase, Inc. | Database, sign-in, and real-time updates for photo walls | Accounts, events, guest names, phone numbers, photo records, logs | United States |
| Stripe, Inc. | Payment processing (collects card and billing details directly) | Billing contact and payment details (held by Stripe) | United States |
| Twilio Inc. | Text-message verification codes, when a host turns on phone verification | Guest phone numbers and verification status | United States |
| Resend, Inc. | Sending service emails (account, billing, and event emails) | Recipient email addresses and message content | United States |
| Amazon Web Services, Inc. | Underlying infrastructure for email delivery used by Resend | Email in transit | United States |
| GitHub, Inc. (Microsoft) | Source code and deployment automation | No customer personal data in normal operation | United States |
| Pipedream, Inc. | Workflow automation for select internal operations | Transient processing only | United States |
Questions? Email [email protected].