Subprocessor List

Vercel — application hosting, edge delivery, request logs, and deployment infrastructure. Processing location depends on configured regions and Vercel's infrastructure.

Supabase — managed PostgreSQL database and related infrastructure. Project region must be selected and documented by Photaaz.

Cloudinary — uploaded image storage, transformation, CDN delivery, metadata, and deletion workflows.

Paddle — merchant of record for enabled purchases, checkout, tax, fraud screening, buyer support, subscriptions, refunds, and payment identifiers. Paddle acts under its own buyer terms and privacy notice for checkout data.

Resend or configured SMTP provider — operational and support email delivery, including addresses, message content, and delivery metadata.

This list must be updated before a new vendor begins processing customer personal data. Material changes will be communicated through the platform or account email where required.

Customers with a lawful objection should contact support promptly. Photaaz will review reasonable concerns and available alternatives.