Sub-processors
Last updated: October 7, 2026
These are the third-party services that process personal data on Picsui's behalf. The same list appears in our Privacy Policy and in section 5.2 of our Data Processing Agreement.
Services in use
| Service | What it does for Picsui | Data involved | Location |
|---|---|---|---|
| Supabase | Database hosting, authentication, and backend services | Account details, event and guest records, and every other record the service stores | United States (AWS infrastructure) |
| Cloudflare | Photo, video, and media storage (R2), CDN, DDoS protection, and Turnstile bot checks on sign-up | Uploaded photos, videos and voice messages; IP addresses and browser signals for bot checks | Global |
| Vercel | Application hosting, deployment, and edge network, plus cookie-free page-view analytics (Vercel Analytics) | Requests to the site, including IP addresses and pages viewed | Global |
| Stripe | Payment processing and billing. Card details go to Stripe directly and are never stored on our servers. | Name, email, billing address and payment details of buyers | United States |
| Resend | Transactional and notification email delivery | Email addresses and the content of the emails we send | United States |
| LiveKit | Live stream video and audio transport, and recording of streams when recording is available. Carries images and voices of identifiable people. Engaged only for events that use the live stream. | Live video and audio of people on camera, and viewers' connection details | United States |
| Sentry | Error monitoring and application performance tracking | Error reports, which can include the signed-in user's account details and the page in use | United States |
| PostHog | Product analytics Engaged only after analytics cookies are accepted. | Pages viewed, actions taken and device details; the account ID and email of signed-in users | United States |
| Google Analytics | Website analytics In the EU/EEA, UK and Switzerland, analytics storage stays off until analytics cookies are accepted; elsewhere it runs unless they are rejected. Never loaded on guest event or gallery pages. | Pages viewed, device and browser details, and a truncated IP address | United States |
| Meta (Facebook) Pixel | Advertising measurement and retargeting on Facebook and Instagram In the EU/EEA, UK and Switzerland, loaded only after marketing cookies are accepted; elsewhere loaded unless they are rejected. Never loaded on guest event or gallery pages or in the iOS app. | Pages viewed, purchase and sign-up events, browser and device details | United States |
| Apple | Push notifications to the Picsui iOS app Engaged only if you use the iOS app and allow notifications. | Your device's push token and the text of the notification | See the provider's privacy policy |
Switched off
The site contains code for these services, but they are not configured and receive no data. We will update this page before turning any of them on.
| Service | What it does for Picsui | Data involved | Location |
|---|---|---|---|
| TikTok Pixel | Advertising measurement and retargeting on TikTok Would follow the same marketing-cookie rules as the Meta pixel. Never loaded on guest event or gallery pages or in the iOS app. Not active: no TikTok pixel ID is configured. | Pages viewed, purchase and sign-up events, browser and device details | United States |
| Crisp | Website support chat Never loaded on guest event or gallery pages. Not active: no Crisp website ID is configured. | Chat messages, and the email and name of a signed-in user | See the provider's privacy policy |
| Yandex Metrica | Website analytics for our Russian-language pages Would follow the same analytics-cookie rules as Google Analytics. Never loaded on guest event or gallery pages. Not active: no Yandex Metrica counter ID is configured. | Pages viewed, clicks and session recordings, device and browser details | See the provider's privacy policy |
| LogRocket | Session replay for debugging Not active: no LogRocket app ID is configured. | Recordings of page interactions and the signed-in user's ID | See the provider's privacy policy |
AI providers
Picsui's AI features (automated photo screening, AI captions, face search and the AI assistant) are switched off, so no AI provider receives your data. If we switch any of them back on, we will update this list and notify customers before any data is sent to an AI provider.
Changes to this list
Customers who have accepted our Data Processing Agreement are told about a new or replacement sub-processor before it is engaged and can object within 30 days, as set out in section 5 of the DPA.
Questions
Email Support@Picsui.com.