Subprocessors
Last updated: 2026-05-30
Papershot (Quantum Byte Technologies, Kenya) engages the following subprocessors to deliver the service. Each is bound by a data processing agreement and where required by EU, UK, Swiss, or Kenyan law, by the appropriate cross-border transfer mechanism (EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent). We give 30 days' notice before adding a new subprocessor that would have access to personal data.
| Name | Role | Region | Data | Policy |
|---|---|---|---|---|
| Amazon Web Services | Hosting, object storage (S3), CDN (CloudFront), Postgres (RDS), key management (KMS) | eu-west-1 (Ireland) primary; replicas in EU regions | All service data, encrypted at rest and in transit | Privacy |
| Stripe | Web payments and receipts | United States and European Union | Transaction metadata, payment receipt identifier; card data handled by Stripe | Privacy |
| Apple | In-app purchases on iOS, push delivery via APNs, Sign in with Apple | United States, European Union | Transaction identifier; opaque device push token; Apple sub identifier | Privacy |
| Google (Firebase Cloud Messaging) | Push notification delivery on Android | United States and European Union | Device push token, notification payload | Privacy |
| Google (Firebase Crashlytics) | Crash and performance reporting on iOS and Android | United States and European Union | Stack traces, device model, OS version, user ID; no photos or message content | Privacy |
| Google (Play Billing) | In-app purchases on Android | United States and European Union | Transaction tokens | Privacy |
| Google (Sign in with Google) | Authentication for Android and web | United States and European Union | Google sub identifier, email, display name | Privacy |
| Resend | Transactional and DSAR-export email delivery | United States and European Union | Email address, message content | Privacy |
Subscribe to changes
To receive notice of new subprocessors, email legal@papershot.com with "Subprocessor notifications" in the subject line. Include the customer or domain you want notifications for.
Objecting to a new subprocessor
To object to a new subprocessor, write to legal@papershot.com within 30 days of notice with "Subprocessor objection" in the subject line. We will discuss the matter with you in good faith.