Sub-processors
The third-party services we use to run PlateRefresh, what each one does, and which data they touch.
Current sub-processors
| Provider | Purpose | Data | Region | Policy |
|---|---|---|---|---|
| Supabase | Authentication, Postgres database, and email-related telemetry. | Account email, hashed password, full name, plan & credit balance, job metadata, email-event log. | EU (eu-central-1, Frankfurt) | link |
| Vercel | Application hosting, edge compute, and Blob storage for uploaded photos & AI outputs. | Uploaded dish photos, AI-rendered outputs, request logs, analytics page-views (cookieless). | US-based provider; EU edge (fra1) for delivery. SCCs / EU–US DPF. | link |
| fal.ai | AI image-edit inference (Nano Banana Pro Edit by default; GPT Image 2 / Seedream available). | Your uploaded dish photo plus optional brand-kit reference photos and the rendered prompt are sent to fal.ai for processing. The output URL is fetched back and re-uploaded to our Vercel Blob storage. fal.ai contractually does not train on submitted data. | EU via aggregator endpoint where available; otherwise US. | link |
| Resend | Transactional & marketing email delivery (lifecycle, password resets, broadcast campaigns). | Email address, name, the rendered email content (subject + HTML body), and delivery status. | US (with EU residency option enabled where supported) | link |
| Inngest | Background-job orchestration (pipeline runs, lifecycle email crons, broadcast fan-out). | Job IDs, user IDs, prompt summaries, and run metadata. No image content is stored on Inngest. | US | link |
| Stripe | Payment processing for subscriptions and one-time credit packs. Currently inactive in dev. | Stripe customer ID, subscription status, transaction events. We do not store full card numbers. | Global; data-residency depends on your country. | link |
| Sentry (optional) | Error monitoring & source-mapped stack traces. Active only when a Sentry DSN is configured. | Error stack traces, request URLs, browser/runtime info, masked user IDs. | EU | link |
Change notifications
When we add or replace a sub-processor that handles personal data, we notify subscribed users by email at least 30 days in advance. The list above is updated at the same time. If you object to a new sub-processor, you may cancel your subscription before the change takes effect under the terms of your plan.
Data Processing Agreements
Each sub-processor on this page has a current Data Processing Agreement (DPA) on file with their published terms. EU customers are processed under Standard Contractual Clauses (SCCs) where data leaves the EEA.
Questions
Email privacy@platerefresh.com for any sub-processor question, including a copy of the current DPA on request.
Last updated: 2026-07-01