Reshot Subprocessors

Why this page exists

Reshot depends on a small set of vendors for identity, hosting, visual storage, CDN delivery, billing, analytics, email, and supporting AI-assisted workflows. This page lists the vendors that materially participate in delivering the service.

The Notes column identifies which vendors are part of the default managed path and which are only used when an optional feature is enabled.

Current subprocessors

Subprocessor	Purpose	Region	Notes
Supabase	Authentication, database, and managed storage	USA / Global	Default managed service.
Vercel	Web hosting, serverless compute, and edge delivery	USA / Global	Default managed service.
Cloudflare	R2 object storage and CDN delivery for visual assets	Global	Default managed service.
Paddle	Billing, subscriptions, and merchant-of-record processing	UK / Global	Default for paid plans.
Resend	Transactional email delivery	USA	Default managed service.
Upstash	Rate limiting and background coordination	USA / Global	Default managed service.
PostHog	Product analytics and usage instrumentation	EU / Global	Optional. Used when analytics is enabled.
GitHub / Microsoft	OAuth, repository integration, and webhook capture triggers	USA	Optional. Used when repository integration is enabled.
Google	Gemini AI for visual intelligence and alt-text generation	USA / Global	Optional. Used for AI-assisted visual processing workflows.

Change management

We update this page when our processor footprint changes in a way that materially affects how Reshot delivers the service. For questions about a listed vendor or a pending change, contact support@reshot.dev.

Scope

This page focuses on the third-party services that help Reshot run production infrastructure, authentication, billing, delivery, support workflows, and product instrumentation. It is meant to complement the privacy policy and DPA, not replace them.