Subprocessors
Last updated: July 8, 2026
Introduction
To provide the SnapGlyph QR code, short link, and Link Hub service and website (collectively, the "Service"), we engage a small number of trusted third-party companies ("subprocessors") that process personal data on our behalf. This page lists our current subprocessors, the purpose each serves, and the categories of data it processes.
This page supplements our Privacy Policy. Each subprocessor is bound by a data processing agreement (or equivalent contractual terms) that requires it to protect personal data and to use it only to provide services to us.
Current Subprocessors
The following subprocessors process personal data as part of the Service:
| Subprocessor | Service & purpose | Categories of data processed | Location |
|---|---|---|---|
| Vercel Inc. | Cloud application hosting, serverless compute, and file/image storage (Vercel Blob) | All account, content, and usage data transiting the application; uploaded Link Hub images | United States |
| Supabase, Inc. | Managed PostgreSQL database (primary data store) | All customer and end-user data: account details; QR code, short link, and Link Hub content and configuration; and analytics records | United States |
| Upstash, Inc. | Redis caching and rate limiting, plus QStash background-job scheduling | IP-derived rate-limit identifiers, cached session data, and queued job payloads | United States |
| Stripe, Inc. | Subscription billing and payment processing | Name, email address, billing address, payment-card data (held by Stripe), and subscription status | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery (verification, invitations, notifications, and alerts) | Recipient name, email address, and message content | United States |
| Google LLC | Google sign-in (OAuth), Google Web Risk URL-safety checks, and Google Fonts on public Link Hub pages | Account profile (name, email) for sign-in; destination URLs submitted for safety scanning; end-user IP address | United States |
| GitHub, Inc. | GitHub sign-in (OAuth) | Account profile (name, email address) | United States |
| Cloudflare, Inc. | Bot protection (Turnstile), malicious-URL scanning, custom-domain SSL and routing, content delivery, and website analytics | IP address, browser signals, destination URLs, and custom-domain configuration | United States |
| Cloudmersive | Antivirus scanning of uploaded hosted-PDF files | Uploaded file content | United States |
| Sentry (Functional Software, Inc.) | Application error and performance monitoring | Diagnostic event data, which may include IP address, account identifiers, and request context | United States |
| Microsoft Corporation (Microsoft Clarity) | Product analytics, session replay, and heatmaps | Interaction and usage data, session recordings, and IP address | United States |
| IPinfo | IP-to-approximate-location (country-level) lookups for scan and click analytics | End-user IP address (submitted for lookup; stored by us in anonymized form) | United States |
| HubSpot, Inc. | Customer relationship management (sync of new sign-ups) | Name, email address, company name, and subscription status | United States |
| Crisp IM SARL | In-app support chat (Pro, Growth, and Max plans) | Name, email address, and support-chat messages | France (European Union) |
International Data Transfers
Several of our subprocessors are located in the United States. Where we transfer personal information outside of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. For more detail, see the "International Data Transfers" section of our Privacy Policy.
Changes to This List
We may add or replace subprocessors as the Service evolves. When we do, we will update this page and revise the "Last updated" date above. Where required by applicable law or contract, we will provide advance notice of material changes so that customers may exercise any rights they have under their agreement with us.
Contact Us
If you have questions about our subprocessors or wish to object to a new subprocessor, please contact us at .