Sub-processors
Last updated: 2026-06-13
What is a sub-processor?
A sub-processor is a third-party service we use to help run FatThumb and that may process personal data on our behalf. We carry out due diligence on each and put a Data Processing Agreement (DPA) in place where required. This page lists our current sub-processors.
Current sub-processors
| Sub-processor | Purpose | Primary region |
|---|---|---|
| Convex | Application database, backend functions, and real-time sync | United States |
| Cloudflare R2 | Object storage for uploaded photos and generated thumbnails | Configurable / global edge |
| OpenAI | AI image generation (GPT Image), image captioning, and content moderation | United States |
| Google (Gemini) | AI image generation (Gemini Image) | United States |
| Stripe | Subscription and one-time payments (card data handled entirely by Stripe) | United States / global |
| Resend | Transactional and lifecycle email | United States |
| PostHog | Product analytics and error tracking (where enabled) | United States / EU |
Biometric data note
Your uploaded face photos are stored by Cloudflare R2 and are sent to the AI providers (OpenAI / Google) only to generate the thumbnails you request. They are not used to train any third-party model and are not shared for any other purpose.
International transfers
We and most of our sub-processors are located in the United States. Where personal data of EU/EEA or UK residents is transferred to the United States, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum.
Changes
We will update this page when we add or remove a sub-processor, and notify you of material changes in accordance with our Privacy Policy.
Contact
Questions about our sub-processors: contact@fatthumb.klaas.pro.