Skip to content
DE
Sign in

Legal

Subprocessors

DRAFT — FOR LAWYER REVIEW. This document has not been reviewed by a qualified lawyer and is not yet binding on anyone. Points needing professional input are marked ⚑ lawyer inline. Do not launch against it.

Last updated · Questions:[email protected]

A subprocessor is a company we use that can, in the course of doing its job, see data belonging to people who use Tincograph. This page lists all of them. If a company is not on this page, it does not have access.

Current subprocessors

Supabase

What it does
The database, authentication and the functions that run our server-side logic. This is where accounts, settings and synced documents live.
What it can see
Email address, password hash, account settings, synced documents, usage records.
Where
European Union (eu-central-1, Frankfurt)
Their privacy policy
https://supabase.com/privacy

Cloudflare

What it does
Serves the website and the apps (Pages, CDN), stores uploaded and generated files in R2, runs the Turnstile bot check at sign-up, forwards support and privacy email (Email Routing), and provides the analytics described below if enabled.
What it can see
IP address (for the duration of a request), uploaded and generated files, Turnstile browser signals, and the URL of each page view.
Where
Global edge network; R2 storage in the European Union
Their privacy policy
https://www.cloudflare.com/privacypolicy/

Resend

What it does
Sends transactional email: sign-up codes, password resets, account-deletion codes, receipts and support notifications.
What it can see
Email address and the contents of the message sent to it.
Where
United States, under Standard Contractual Clauses
Their privacy policy
https://resend.com/legal/privacy-policy

Paddlenot yet connected

What it does
Takes payment for web purchases as merchant of record, which means it — not us — charges you, issues the invoice, handles VAT and processes refunds. Used for purchases on tincograph.com (live once the company is registered).
What it can see
Email address, billing country, and the payment details you give it directly. We never see a card number; we receive your Paddle customer id and subscription status.
Where
United Kingdom (adequacy decision) and United States, under Standard Contractual Clauses
Their privacy policy
https://www.paddle.com/legal/privacy

Stores and sign-in

  • Google Play (store billing). Sells plans and credit packs inside the Softbox app. Google processes the payment; we receive a purchase token, the product id and an order id.
  • Google (Sign-In). Only if you choose Continue with Google. We receive your email address and name (scope: email).

Model providers

When you use Studio or Enhance, your photo and prompt go, on your behalf, to the providers below. On-device features (including the AI masks in Softbox) send nothing anywhere.

  • Your own provider. If you add your own API key, requests go from your machine straight to that provider. We never see them, and that provider's terms are between you and them.
  • fal.ai (Studio). Runs Studio generations: receives the photo you uploaded (without EXIF or location) and your prompt, returns the image or video. United States.
  • OpenRouter (Enhance). The Enhance button sends only your prompt text, through OpenRouter, to a language-model provider (Together or Fireworks). We keep one log line per request without the text.
  • OpenRouter (Studio safety check). Studio photos, prompts and results are checked by an AI safety model reached through OpenRouter, routed only to providers that do not store or train on the content.

A new provider is listed here before the feature that uses it ships.

Analytics

Cloudflare Web Analytics is cookieless. It records the URL of a page view, a referrer and a coarse country, and it does not set an identifier or follow anyone between sites. That is why this site has no cookie banner: it sets no cookies at all.

Changes

Adding a subprocessor means changing this page. If you have a contract with us that requires notice before a change, notice goes to the address on that contract; otherwise the date above is the record. To be told when it changes, write to [email protected].