Subprocessors
The companies that process personal data on our behalf, what they handle and where. We update this page before adding or changing one.
Zuletzt aktualisiert am
Dieses Dokument ist auf Englisch; die englische Fassung ist verbindlich.
Current subprocessors
| Service | Provider | Data they process | Location |
|---|---|---|---|
| Payments | Stripe, Inc. | Name, email, billing address and country, card details, payment history | United States |
| Hosting, database and file storage | Railway Corporation | All account data, uploaded photos (for up to 24 hours) and results | United States |
| Transactional email | Resend | Email address and the content of emails such as login links, receipts, reminders and news emails | United States |
| Image generation | AI model providers | Uploaded photos, your prompt and the template or tool instructions, for as long as it takes to make the result | United States |
| Ad measurement | Meta Platforms | Unless you opt out (in the EU, the EEA, the UK and Switzerland, only with cookie consent): pages visited, ad click ID, hashed email address, IP address, browser, signup, free-trial start and purchase events | United States |
| Ad measurement | TikTok | Unless you opt out (in the EU, the EEA, the UK and Switzerland, only with cookie consent): pages visited, ad click ID, hashed email address, IP address, browser, signup, free-trial start and purchase events | Singapore, US |
| Ad measurement | OpenAI | Unless you opt out (in the EU, the EEA, the UK and Switzerland, only with cookie consent): pages visited, ad click ID, hashed email address, IP address, browser, signup, free-trial start and purchase events | United States |
Payments
- Provider
- Stripe, Inc.
- Data they process
- Name, email, billing address and country, card details, payment history
- Location
- United States
Hosting, database and file storage
- Provider
- Railway Corporation
- Data they process
- All account data, uploaded photos (for up to 24 hours) and results
- Location
- United States
Transactional email
- Provider
- Resend
- Data they process
- Email address and the content of emails such as login links, receipts, reminders and news emails
- Location
- United States
Image generation
- Provider
- AI model providers
- Data they process
- Uploaded photos, your prompt and the template or tool instructions, for as long as it takes to make the result
- Location
- United States
Ad measurement
- Provider
- Meta Platforms
- Data they process
- Unless you opt out (in the EU, the EEA, the UK and Switzerland, only with cookie consent): pages visited, ad click ID, hashed email address, IP address, browser, signup, free-trial start and purchase events
- Location
- United States
Ad measurement
- Provider
- TikTok
- Data they process
- Unless you opt out (in the EU, the EEA, the UK and Switzerland, only with cookie consent): pages visited, ad click ID, hashed email address, IP address, browser, signup, free-trial start and purchase events
- Location
- Singapore, US
Ad measurement
- Provider
- OpenAI
- Data they process
- Unless you opt out (in the EU, the EEA, the UK and Switzerland, only with cookie consent): pages visited, ad click ID, hashed email address, IP address, browser, signup, free-trial start and purchase events
- Location
- United States
About AI model providers
Depending on the template or tool you choose, we route each image to one of a small number of AI image model providers. They receive the photo and the instructions, return the image, and may keep inputs for a short time to detect abuse, under terms that don't allow them to train on it.
We'll name each provider here once our agreements with them are final, and update this list whenever one is added or replaced.
Services you choose to use
If you log in with Google, Google receives the login request and shares your name and email address with us. Google acts as an independent controller under its own privacy policy.
Transfers outside the EU and UK
All current subprocessors process data in the United States. Transfers from the EU and the UK are covered by Standard Contractual Clauses, the UK Addendum or the EU–US Data Privacy Framework, as described in the privacy policy.
Changes and notifications
We update this page before a new subprocessor starts processing personal data. To get an email when it changes, write to privacy@outwow.app with the subject “Subprocessor updates”. If you object to a new subprocessor, you can close your account at any time.