82DASH Subprocessors

At 82DASH, we believe transparency should be as smooth as our software. That's why we openly share the trusted partners (our "subprocessors") who help keep things running safely, securely, and fast.

Think of them as the behind-the-scenes crew making sure your content, emails, and data are handled with care, speed, and compliance.

Subprocessor: Vercel

Nature and Purpose of Processing: Hosts the Next.js frontend and API routes; holds server logs.

Categories of Personal Data: IP addresses, HTTP headers, any request/response bodies sent to the API.

Location of Processing: EU and USA.

Privacy/Data Processing Policy: https://vercel.com/legal/dpa

Subprocessor: Supabase

Nature and Purpose of Processing: Managed Postgres database, authentication service, and object storage for user uploads.

Categories of Personal Data: Names, email addresses, password hashes, session tokens, profile data, images.

Location of Processing: EU and USA.

Privacy/Data Processing Policy: https://supabase.com/legal/dpa

Subprocessor: ImageKit

Nature and Purpose of Processing: Real-time image optimisation.

Categories of Personal Data: User-uploaded images and public URLs that reference them (may include facial images).

Location of Processing: Global CDN edge network with core processing in the EU.

Privacy/Data Processing Policy: https://imagekit.io/gdpr/

Subprocessor: SendGrid (Twilio)

Nature and Purpose of Processing: Transactional email delivery (sign-up confirmation, password reset, notifications, reminders, coupon codes, etc).

Categories of Personal Data: Recipient email address, message content, IP and user-agent in click/open tracking.

Location of Processing: EU and USA.

Privacy/Data Processing Policy: https://www.twilio.com/en-us/legal/data-protection-addendum

Subprocessor: OpenAI

Nature and Purpose of Processing: AI-based image inference, classification, tagging, and moderation (OpenAI Vision / Moderation API).

Categories of Personal Data: Images you upload (may contain identifiable faces or sensitive content).

Location of Processing: USA.

Privacy/Data Processing Policy: https://openai.com/policies/data-processing-addendum/

Subprocessor: Bunny.net

Nature and Purpose of Processing: Video hosting and processing.

Categories of Personal Data: Videos you upload (may contain identifiable faces or sensitive content).

Location of Processing: EU / Global CDN.

Privacy/Data Processing Policy: https://bunny.net/gdpr/

Subprocessor: Google LLC (Google Analytics)

Nature and Purpose of Processing: Web analytics - measures site traffic, user behaviour, and campaign performance. Consent-gated; loads only after cookie consent is granted.

Categories of Personal Data: IP addresses (anonymised where configured), device and browser identifiers, pages visited, session duration, referral source, interaction events.

Location of Processing: USA / Global.

Privacy/Data Processing Policy: https://business.safety.google/adsprocessorterms/

Subprocessor: PostHog Inc

Nature and Purpose of Processing: Product analytics - tracks feature usage, session replays, and user interactions to inform product development. Consent-gated; loads only after cookie consent is granted.

Categories of Personal Data: IP addresses, device and browser identifiers, pages visited, feature interactions, session recordings (may capture on-screen text and user input).

Location of Processing: EU and USA.

Privacy/Data Processing Policy: https://posthog.com/dpa

Subprocessor: Attio Ltd

Nature and Purpose of Processing: Customer relationship management - stores and organises contact and company records, communication history, and deal pipeline data.

Categories of Personal Data: Contact names, email addresses, company names, job titles, communication metadata, notes.

Location of Processing: EU and USA.

Privacy/Data Processing Policy: https://attio.com/legal/dpa

Subprocessor: Stripe Payments UK Limited

Nature and Purpose of Processing: Payment processing and subscription billing (checkout, invoicing, subscription lifecycle management).

Categories of Personal Data: Name, email address, billing address, payment card details (tokenized), subscription/plan data, transaction history.

Location of Processing: UK.

Privacy/Data Processing Policy: https://stripe.com/legal/dpa

Subprocessor: Cloudflare, Inc.

Nature and Purpose of Processing: CDN, DNS, DDoS protection and Web Application Firewall.

Categories of Personal Data: IP addresses, HTTP headers, request metadata, and any data contained in requests/responses passing through the proxy.

Location of Processing: EU and USA (global edge network).

Privacy/Data Processing Policy: https://www.cloudflare.com/cloudflare-customer-dpa/

Last updated: August 2026