Legal

Sub-processors

Last updated: 2026-11-03

1. Purpose of this list

HungryShot is a software by [Company legal name] ([Registered address]). To run the Service we use the third-party providers listed below. They may process personal data on our behalf (sub-processors), or, in the case of Stripe, handle part of it as an independent controller.

This list supports our Privacy Policy and our Data Processing Addendum. Country means the location of the provider's contracting entity; where we know where our data is stored, we say so.

2. Stripe (payment processing)

  • Provider: Stripe Payments Europe, Limited (Ireland), with Stripe, Inc. (United States) and other Stripe group companies.
  • Purpose: payment processing, fraud prevention, invoicing and receipts.
  • Data: name, email, billing country, tax details where required, payment method data and transaction status. We receive only the payment status, plan, country and the brand and last digits of the payment method.
  • Role: Stripe acts as a processor for payment processing on our behalf and as an independent controller for its own compliance and fraud-prevention purposes, under its privacy policy (https://stripe.com/privacy).

    • 3. Hosting provider

  • Provider: [Hosting provider legal name and country].
  • Purpose: hosting of the HungryShot application on a virtual private server.
  • Data: all data passing through the application (account, usage and technical data, and the content you submit, such as dish photos and brand assets, while it is processed).

    • 4. Neon

  • Provider: Neon, Inc. (United States). Our production database runs on Amazon Web Services in Frankfurt, Germany (eu-central-1).
  • Purpose: managed PostgreSQL database and authentication data.
  • Data: account and profile data, generation history, dish library entries, menu copy, credit transactions and settings.

    • 5. Cloudflare R2

  • Provider: Cloudflare, Inc. (United States).
  • Purpose: object storage for the dish photos, menus, logos and videos you upload and for the results we generate.
  • Data: uploaded images and brand assets, generated food images and videos, and their file names. Uploads are private to your account.

    • 6. Google (Gemini)

  • Provider: Google LLC (United States).
  • Purpose: AI models that analyse your dish photos, write dish names, menu descriptions, captions and hashtags, and edit images.
  • Data: the photos and text instructions you submit for a generation, and the generated output.

    • 7. Replicate

  • Provider: Replicate, Inc. (United States).
  • Purpose: hosting and running the AI models that generate and edit images and videos.
  • Data: the photos, reference images and text instructions you submit for a generation, and the generated output.

    • 8. Resend

  • Provider: Resend, Inc. (United States).
  • Purpose: sending transactional emails (account confirmation, security notices, receipts, support replies).
  • Data: your email address, name and the content of the email.

    • 9. International transfers

    Some providers process data outside the European Economic Area and the United Kingdom, including in the United States. We rely on an adequacy decision (including the EU-US Data Privacy Framework for certified recipients) or on the Standard Contractual Clauses and supplementary measures where needed. See Section 7 of our Privacy Policy.

    10. Changes and objections

    We will update this page before we add or replace a sub-processor and notify account holders by email at least 14 days before the change takes effect. If you object on reasonable data protection grounds, write to contact@hungryshot.com within that period and we will work with you on a solution; if none is found you may cancel the affected service. See our Data Processing Addendum for details.

    Questions: contact@hungryshot.com.

    contact@hungryshot.com
    Terms of ServicePrivacy PolicyRefund PolicyAcceptable UseData Processing AddendumCookie Policy