Subprocessors
These companies process personal data on our behalf to run ScanMosaic. Each is bound by a data processing agreement with safeguards at least as protective as our own.
| Company | Purpose | Personal data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery, security, the database and file storage, DNS and SSL for custom domains, privacy-friendly web analytics | All service data: account and workspace data, codes and links, scan records, uploaded files and request data such as IP address (used to deliver and protect requests, not stored by us) | Global edge network; United States and European Union |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Payments, subscriptions and invoices | Name, email address, billing address, payment details, purchase history | United States, European Union, United Kingdom |
| Replicate, Inc. | Generating AI QR code art | The picture description and the link to encode. No account data. | United States |
| Google LLC (Web Risk) | Checking dynamic code and short-link destinations against lists of unsafe sites | Destination web addresses. No account or visitor data. | United States |
| Resend, Inc. | Sending email: sign-in codes, invitations, receipts and replies to support messages | Recipient email address and the email's content | United States |
Other providers
PayPal processes the PayPal email address of affiliates we pay commissions to. Integrations you switch on yourself, such as Google Analytics 4, receive data on your instructions and under your own agreement with that provider; they are not our subprocessors.
Changes to this list
We tell business customers who accepted our data processing addendum about a new subprocessor at least 30 days before it starts processing their personal data, by email to the workspace owner and by updating this page. You can object within that period, as set out in the addendum.
Questions
Email [email protected].