Subprocessors
The companies that process personal data on our behalf, what they handle and where. We update this page before adding or changing one.
Last updated
Current subprocessors
| Service | Provider | Data they process | Location |
|---|---|---|---|
| Payments | Stripe, Inc. | Name, email, billing address and country, card details, payment history | United States |
| Hosting, database and file storage | Railway Corporation | All account data, uploaded photos (for up to 24 hours) and results | United States |
| Transactional email | Resend | Email address and the content of emails such as login links and receipts | United States |
| Image generation | AI model providers | Uploaded photos, your prompt and the template or tool instructions, for as long as it takes to make the result | United States |
| Analytics | None | We don't use third-party analytics | — |
Payments
- Provider
- Stripe, Inc.
- Data they process
- Name, email, billing address and country, card details, payment history
- Location
- United States
Hosting, database and file storage
- Provider
- Railway Corporation
- Data they process
- All account data, uploaded photos (for up to 24 hours) and results
- Location
- United States
Transactional email
- Provider
- Resend
- Data they process
- Email address and the content of emails such as login links and receipts
- Location
- United States
Image generation
- Provider
- AI model providers
- Data they process
- Uploaded photos, your prompt and the template or tool instructions, for as long as it takes to make the result
- Location
- United States
Analytics
- Provider
- None
- Data they process
- We don't use third-party analytics
- Location
- —
About AI model providers
Depending on the template, tool and quality you choose, we route each image to one of a small number of AI image model providers. They receive the photo and the instructions, return the image, and may keep inputs for a short time to detect abuse, under terms that don't allow them to train on it.
We'll name each provider here once our agreements with them are final, and update this list whenever one is added or replaced.
Services you choose to use
If you log in with Google, Google receives the login request and shares your name and email address with us. Google acts as an independent controller under its own privacy policy.
Transfers outside the EU and UK
All current subprocessors process data in the United States. Transfers from the EU and the UK are covered by Standard Contractual Clauses, the UK Addendum or the EU–US Data Privacy Framework, as described in the privacy policy.
Changes and notifications
We update this page before a new subprocessor starts processing personal data. To get an email when it changes, write to privacy@outwow.app with the subject “Subprocessor updates”. If you object to a new subprocessor, you can close your account at any time.