Data Recovery ProSub-processors
Last updated: [EFFECTIVE DATE]
In short: a few companies run parts of our service for us. They handle only the data they need, under contracts that require them to protect it. None of them receives your recovered files, which stay on your computer. The one exception is Restore with AI: if you use it, the photos you choose are passed through OpenRouter to the AI model provider to be restored, and neither keeps them.
1. Companies that process data for us
| Company | What they do for us | Personal data | Location | Privacy |
|---|---|---|---|---|
| Cloudflare | Website hosting and security; our server code and database (accounts and sign-in, receipts, purchase records, credit records, support tickets); passing photos sent with Restore with AI to OpenRouter, without storing them; email routing for our support address; hosting the app downloads and update files | IP address, request details, email, name, sessions, install ID, volume serial number, order details, ticket messages, emails sent to support | Database: EU jurisdiction (stored in the EU). Website and server code: global network (Cloudflare, Inc., USA) | cloudflare.com/privacypolicy |
| Resend | Sending support replies, ticket notifications and account emails | Email address, name, email content | Ireland (EU) | resend.com/legal/privacy-policy |
| Crisp | Live chat, only after you click "Chat with us" | Chat messages, email if given, IP address, browser details | EU (France) | crisp.chat/en/privacy |
| Google (Gmail) | Our support inbox | Ticket notifications and replies | USA and worldwide (Google LLC) | policies.google.com/privacy |
| OpenRouter | Passing photos sent with Restore with AI to the AI model provider and returning the result, only if you use Restore with AI. Requests are limited to providers with zero data retention that do not train on the data | Photos you choose to restore (not stored) | USA [CONFIRM] | openrouter.ai/privacy |
| The AI model provider in use, currently [MODEL PROVIDER] | Running the AI model that restores the photo, only if you use Restore with AI. Zero data retention; not used for training | Photos you choose to restore (not stored) | [LOCATION] | [PRIVACY POLICY LINK] |
2. Independent controllers
These companies decide for themselves how to use the data they collect, under their own privacy notices.
| Company | When | Privacy |
|---|---|---|
| Paddle.com (merchant of record) | When you pay, ask for an invoice or get a refund | paddle.com/legal/privacy |
| Apple | Only if you choose Sign in with Apple | apple.com/legal/privacy |
| Only if you choose Sign in with Google | policies.google.com/privacy |
3. Transfers outside the UK
Where a provider processes data outside the UK, we rely on safeguards recognised under UK data protection law, as explained in section 7 of the privacy notice.
4. Changes
We update this page before we add or replace a company that processes personal data for us. Account holders will be told by email of significant changes.