Data Processing and Sub-processor Disclosure
Visibility Group Limited · Version 1.0
Last updated: [date]. We give at least 30 days' notice of a new provider that will process members' personal data, here and by email to members who ask for it at Account › Privacy. You may object, and if we cannot address the objection you may close your account and receive a pro-rata refund.
Service providers (processors)
| Provider | What they do for us | Personal data they process | Where |
|---|---|---|---|
| Supabase, Inc. | Database, file storage and sign-in sessions | Everything in our Privacy Policy §3 except face templates and card details | United States (AWS us-east-1, N. Virginia) |
| Amazon Web Services, Inc. | Identity verification by face check (Amazon Rekognition, Face Liveness) | The face check video (transient) and the face template | United States (us-east-1, N. Virginia) |
| Vercel Inc. | Hosting the website and running its server code | Everything that passes through a page request, including network address and browser details | United States (Washington, D.C., iad1); global edge network |
| Resend | Sending email | Recipient address and name, email content (including relayed contact messages and their sender's address), delivery and bounce status | United States |
| [ID verification provider TBC] | Photo ID verification | Document image (transient), check result, document type, country and expiry | [TBC] |
| SociaVault [TBC: legal entity] | Reading public follower counts for social accounts you link | Your public Instagram, TikTok or YouTube handle or URL | [TBC] |
| Microsoft | Encrypted backup storage | A full copy of the database and uploaded files | [TBC] |
Independent providers (each its own controller)
These receive data from you or from us, but use it under their own privacy policies, not ours:
| Provider | What for | Data | Their policy |
|---|---|---|---|
| Stripe (Stripe Payments Company, Stripe, Inc., or the Stripe entity for your region) | Payments, on Stripe's hosted checkout | Your email, card and billing details, which you enter directly with Stripe; our account and profile references | stripe.com/privacy |
| Google LLC / Google Ireland Ltd | Sign-in with Google | Your Google account, which you use to sign in | policies.google.com/privacy |
| Google LLC (Web Risk API) | Checking that links on profiles are safe | Website URLs on profiles | Google Cloud Privacy Notice |
| Cloudflare, Inc. (1.1.1.2 and 1.1.1.3 resolvers) | Checking that links on profiles are not malware or adult sites | The domain name of the link | 1.1.1.1 privacy policy |
| Bluesky (public API) | Reading public follower counts | Your public Bluesky handle | bsky.social/about/support/privacy-policy |
| IndexNow (Microsoft Bing, Yandex and others) | Telling search engines a public page has changed | The page's public URL | Each participant's own |