Subprocessors
Last Updated: March 24, 2026
Supload LLC uses the following third-party subprocessors to deliver the Supload service. Each subprocessor processes data only as necessary to provide the specific function described below.
We will update this page before engaging any new subprocessor and provide at least 30 days’ notice to enterprise customers who have subscribed to subprocessor change notifications. To subscribe, email [email protected] with the subject line “Subprocessor Notifications.”
Current Subprocessors
| Subprocessor | Function | Data Processed | Infrastructure Location |
|---|---|---|---|
| Supabase, Inc. (hosted on Amazon Web Services) | Backend infrastructure — authentication, database, crash reporting, anonymized analytics, session management | Account information (email, name, user ID), anonymized usage analytics, crash reports, session tokens | United States (AWS US West) |
| Google LLC | Authentication (Google Sign-In), cloud storage integration (Google Drive) | Email address, display name, profile photo URL (authentication); user’s media files uploaded directly from device to user’s own Google Drive (cloud storage) | United States |
| Apple Inc. | Authentication (Sign in with Apple), app distribution (App Store), subscription billing (In-App Purchase), age category signals (where required by state law) | Email address (may be relay), display name (authentication); subscription status (billing); age category signal where applicable (not stored) | United States |
| Stripe, Inc. | Payment processing for direct-billed business and enterprise accounts | Billing email, subscription status, last four digits of payment card — Supload never receives or stores full card numbers | United States |
| Cloudflare, Inc. (Cloudflare Pages) | Hosting for the customer portal (subscription management, user allocation, billing) and the Supload marketing website | IP address (transient, used for routing and security — not stored by Supload), page requests | Global CDN (edge network) |
What We Do NOT Share with Subprocessors
- Your photos and videos. Media files go directly from your device to your own cloud storage (Google Drive or Dropbox). They never pass through Supload’s servers or any subprocessor.
- Advertising data. We do not use advertising subprocessors, ad networks, or data brokers.
- Analytics with PII. Usage analytics are stripped of all personally identifying information before storage in Supabase.
Data Processing Agreements
Supload maintains data processing agreements with each subprocessor that include obligations for data protection, security, confidentiality, and compliance with applicable data protection laws including GDPR, CCPA, and other US state privacy laws.
Changes to This List
| Date | Change |
|---|---|
| March 24, 2026 | Initial publication |
Questions
Contact [email protected] with any questions about our subprocessors or data processing practices.