Vaulted is operated by 17795386 Canada Inc. To provide our service, we work with a small number of trusted third-party providers who process personal data on our behalf. We require each of them to protect that data to a standard consistent with our Privacy Policy.
This page lists our current subprocessors. We update it when our subprocessors change. See the "Changes to this list" section below for how we notify you.
Last updated: [DATE AT PUBLICATION]
Core infrastructure
| Subprocessor | Purpose | Data processed | Region | Privacy |
|---|---|---|---|---|
| Supabase | Database and file storage. Hosts account data, Vault and Wishlist contents, and uploaded images. | Account details, collection data, uploaded shirt images, usage records | Canada (ca-central-1) | supabase.com/privacy |
| Cloudflare | DNS, domain, and content delivery / network protection for our web property. | IP addresses, request metadata | Global | cloudflare.com/privacypolicy |
AI and image processing
| Subprocessor | Purpose | Data processed | Region | Privacy |
|---|---|---|---|---|
| Google (Gemini API) | AI analysis of shirt photos for identification and metadata extraction during scanning. | Shirt images submitted for identification | Google Cloud (global) | policies.google.com/privacy |
| Modal (Modal Labs) | Runs CLIP image-embedding inference on submitted shirt photos for visual similarity matching, identification, and autofill. | Shirt images submitted for identification or autofill (live scans and uploaded photos) | United States (us-east, Virginia) | modal.com/legal/privacy-policy |
Authentication and app platforms
| Subprocessor | Purpose | Data processed | Region | Privacy |
|---|---|---|---|---|
| Apple | Sign in with Apple, push notifications (APNs), and App Store distribution. | Authentication identifiers, push tokens | United States / global | apple.com/legal/privacy |
| Sign in with Google and Google Play distribution. | Authentication identifiers, email address | United States / global | policies.google.com/privacy |
Communications
| Subprocessor | Purpose | Data processed | Region | Privacy |
|---|---|---|---|---|
| Resend | Sending transactional email (account, security, review status, and notification emails). | Email address, display name | United States | resend.com/legal/privacy-policy |
| Microsoft (365) | Company email, including support correspondence. | Any personal data contained in emails you send us or we send you | Canada | privacy.microsoft.com |
Changes to this list
We may add or replace subprocessors as our service evolves. When we make a material change to this list, we will update this page and provide notice as described in our Privacy Policy. If you have concerns about a new subprocessor, you can contact us at privacy@vaulted.live.