loupe
Sub-processors
Last updated 2026-08-05 · Version 0.1 (DRAFT)
Draft for review
This document is a working draft prepared to be reviewed by a qualified lawyer. It is not legal advice, and some details (marked with brackets) still need to be finalised before publishing.
To provide loupe, we use a small number of trusted third-party providers (“sub-processors”) that process personal information on our behalf. Each is bound by a contract requiring appropriate security and use of the information only on our instructions. This page lists our current sub-processors, what they do, and where they process data. We keep it up to date and will give notice of material changes as required.
| Sub-processor | Purpose | Data processed | Location | Safeguards / notes |
|---|---|---|---|---|
| Supabase | Primary database, authentication, and file storage | Account data, piece details, uploaded documents and photos, valuation history | Australia, Sydney (ap-southeast-2) | Row-level security; private storage with signed URLs; primary data residency in Australia. |
| Anthropic (Claude API) | AI processing: extracting attributes from photos/receipts; concierge | Images, receipt/document content, and concierge questions submitted for processing | United States / provider regions | Enterprise/commercial terms; not used to train models beyond returning results; server-side only; PII minimised. |
| Stripe | Subscription billing and payment processing | Billing name, payment method (held by Stripe), subscription status, billing country | United States / global | PCI-DSS compliant; we do not store full card numbers; SCCs where applicable. |
| Vercel | Application hosting, serverless/edge functions, content delivery | Technical/request data; transient processing of app traffic | United States / global edge | TLS in transit; env-isolated secrets; SCCs where applicable. |
| Email provider (Resend / Postmark) | Transactional and (with consent) marketing email | Email address, message content, delivery metadata | United States / provider regions | Service, security, and opted-in marketing email; SCCs where applicable. [Confirm provider.] |
| Sentry | Error and performance monitoring | Diagnostic/error data; minimised technical identifiers | United States / provider regions | Configured to minimise PII in error payloads. |
| Analytics (GA4 / Plausible) | Product analytics (consent required) | Usage events, truncated IP, device/browser data | Provider regions | Loaded only with consent; privacy-protective configuration. [Confirm provider.] |
Supabase
- Purpose
- Primary database, authentication, and file storage
- Data
- Account data, piece details, uploaded documents and photos, valuation history
- Location
- Australia, Sydney (ap-southeast-2)
- Notes
- Row-level security; private storage with signed URLs; primary data residency in Australia.
Anthropic (Claude API)
- Purpose
- AI processing: extracting attributes from photos/receipts; concierge
- Data
- Images, receipt/document content, and concierge questions submitted for processing
- Location
- United States / provider regions
- Notes
- Enterprise/commercial terms; not used to train models beyond returning results; server-side only; PII minimised.
Stripe
- Purpose
- Subscription billing and payment processing
- Data
- Billing name, payment method (held by Stripe), subscription status, billing country
- Location
- United States / global
- Notes
- PCI-DSS compliant; we do not store full card numbers; SCCs where applicable.
Vercel
- Purpose
- Application hosting, serverless/edge functions, content delivery
- Data
- Technical/request data; transient processing of app traffic
- Location
- United States / global edge
- Notes
- TLS in transit; env-isolated secrets; SCCs where applicable.
Email provider (Resend / Postmark)
- Purpose
- Transactional and (with consent) marketing email
- Data
- Email address, message content, delivery metadata
- Location
- United States / provider regions
- Notes
- Service, security, and opted-in marketing email; SCCs where applicable. [Confirm provider.]
Sentry
- Purpose
- Error and performance monitoring
- Data
- Diagnostic/error data; minimised technical identifiers
- Location
- United States / provider regions
- Notes
- Configured to minimise PII in error payloads.
Analytics (GA4 / Plausible)
- Purpose
- Product analytics (consent required)
- Data
- Usage events, truncated IP, device/browser data
- Location
- Provider regions
- Notes
- Loaded only with consent; privacy-protective configuration. [Confirm provider.]
Cross-border processing
loupe’s primary store of your pieces, documents, and account data is in Australia (Sydney). Some providers above process personal information overseas (for example, in the United States). Before any overseas disclosure we take reasonable steps to ensure the recipient handles information consistently with the Australian Privacy Principles, and, where the GDPR applies, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision. See the Privacy Policy for more.
Changes
When we add, remove, or replace a sub-processor that handles personal information, we will update this list and provide notice where required.