Legal
Subprocessors
Last updated: 17 September 2026Effective from: 17 September 2026Version 2026-09-17
This page lists infrastructure providers currently used to operate RemiXiss. It will be updated when providers change. Locations that cannot be independently verified are labelled as such instead of being guessed.
Service Provider: Oliwier Zaremba – RMXVisual Górnośląska 21A 62-800 Kalisz Poland kontakt@rmxvisual.pl
1. Vercel Inc.
Purpose: Application hosting, Next.js / serverless runtime, TLS termination and content delivery for RemiXiss.
Categories of data: Account and session data processed by the application, photographer and client request data, technical logs generated by hosting, uploaded-media metadata as handled by the application.
Location: Vercel operates globally. RemiXiss does not independently guarantee that all Vercel processing remains in the European Union. (not fully independently verified).
Privacy / legal information: https://vercel.com/legal/privacy-policy
2. Supabase
Purpose: Managed PostgreSQL database used for application data, including accounts, galleries, media metadata and operational records.
Categories of data: Photographer account and profile data, gallery and photo metadata, authentication records, billing metadata, gallery statistics events and related operational data.
Location: Current production PostgreSQL is operated by Supabase. The live RemiXiss database is configured on European Union infrastructure. Other Supabase support or platform processing locations are not independently verified here.
Privacy / legal information: https://supabase.com/privacy
3. Cloudflare, Inc.
Purpose: Cloudflare R2 object storage for production photographs and related media objects, including signed-object delivery.
Categories of data: Photographs and other media uploaded by photographers, generated previews/thumbnails/backgrounds, and object metadata required to store and retrieve those files.
Location: Cloudflare R2 location depends on the configured bucket. RemiXiss does not publish a guaranteed EU-only storage location for R2 in this document. (not fully independently verified).
Privacy / legal information: https://www.cloudflare.com/privacypolicy/
4. Stripe
Purpose: Payment processing, subscription billing, invoices and the customer billing portal for paid RemiXiss plans.
Categories of data: Billing identity (name/email), subscription status, plan selection, Stripe customer and subscription identifiers, and payment-method data handled by Stripe. RemiXiss does not store full payment card numbers.
Location: Stripe may process payment data in the United States and other countries according to Stripe's own terms. RemiXiss does not independently verify every Stripe processing location. (not fully independently verified).
Privacy / legal information: https://stripe.com/privacy
5. OVHcloud
Purpose: Transactional and service email delivery (SMTP) for messages such as password-reset and account/service notices.
Categories of data: Recipient email address and the content of the transactional message being sent.
Location: Email is sent through OVHcloud SMTP (smtp.mail.ovh.net). Geographic processing location is not independently verified beyond that provider hostname. (not fully independently verified).
Privacy / legal information: https://www.ovhcloud.com/en/personal-data-protection/