Subprocessors

These are the companies Pixonaut engages to process personal data, as the Data processing agreement provides. We give 30 days’ notice, by email to each workspace’s admins and on this page, before we add or replace one, and a workspace may object as the DPA describes.

A company is listed here when any personal data can reach it. Error tracking, uptime monitoring and logs run on Pixonaut’s own servers and add no company to the list. A custom printshop a workspace configures is that workspace’s own recipient, not Pixonaut’s subprocessor. Google and Microsoft, when a member chooses to sign in with one of them, handle that sign-in as controllers in their own right, not as Pixonaut’s subprocessors; the Privacy policy describes what they tell us.

Vendor	What it does	Where	When it receives data	What it receives	Transfer basis
Hetzner	Storage and hosting: the database, files and servers in Finland, and encrypted backups of the database and print files in Germany	European Union (Helsinki, Finland; Falkenstein, Germany)	Always	Everything Pixonaut stores	None needed: in the EU
Amazon Web Services	Sending emails (SES) and text messages (End User Messaging)	European Union (Ireland, eu-west-1)	When the platform sends an email or a text message	The message and the address or number it goes to	Processed in the EU; the EU-US Data Privacy Framework covers any access from the US
Anthropic	AI inference: Pixel, the assistant (Claude)	United States	Only when Pixel is used	The member’s prompts, Pixel’s conversation, and the design’s text and pictures the request needs; never used to train models	Standard Contractual Clauses
Replicate	Picture generation, upscaling a picture, removing a photo’s background, and segmenting a picture: masking its regions or reading its depth	United States	Only when a picture is generated, upscaled or segmented, or a photo’s background is removed	For picture generation, the prompt and any reference pictures it needs; for upscaling and segmentation, the picture’s pixels; for background removal, the photo, which can be one a shopper uploaded. Inputs and results are deleted within one hour, except a picture uploaded to be upscaled, which is deleted when the upscale ends and within 24 hours at most; never used to train models	Standard Contractual Clauses
Printful	Printing and shipping an order	United States	Only for an order a workspace sends to Printful	The order’s recipient and its print files	Standard Contractual Clauses (Module 2), incorporated in Printful Inc.’s data processing terms
Stripe	Billing a workspace	European Union and United States	When a workspace chooses or pays for a plan	The workspace’s billing contact and payment details; never shoppers’ data	EU-US Data Privacy Framework
Cloudflare	DNS, TLS and the network in front of Pixonaut’s sites and API; serving the SDK’s files	Worldwide	Every request to Pixonaut’s sites, the API and the SDK’s files	The traffic itself, including visitors’ IP addresses	EU-US Data Privacy Framework