Cloudflare, processor
Cloudflare supports production infrastructure, including R2 Object Storage, Workers and relevant network, security and file-processing services. Data can include photos, originals, web variants, revisions, deliveries, metadata, object keys and applicable IP or request data. Persistent object data in R2 is stored within the European Union in accordance with Cloudflare R2's EU jurisdiction configuration. This does not mean all Cloudflare network processing is guaranteed to occur only in the EU.
Railway, processor
Railway hosts the production Shootbin application and related infrastructure, including application processing, database, queues, cache and background jobs. Data can include account data, project metadata, messages, annotations, ratings, approvals, contract data, billing metadata, login and security data and technical logs. This page does not make a claim about a Railway data-centre region that is not established in the application repository.
Mollie, independent controller for ordinary payments
Mollie processes payment data for subscriptions, payments, Mollie Connect and, where applicable, invoicing. For ordinary payment processing, Mollie generally acts as an independent controller under its own privacy policy, not as a Shootbin subprocessor. Particular services, such as invoicing, can involve a processor relationship under Mollie's DPA. Mollie's own privacy terms apply to its processing.
International processing and safeguards
Shootbin does not represent that every provider or network operation is exclusively located in the European Union. Where required, appropriate GDPR transfer safeguards apply, including adequacy decisions or standard contractual clauses.
Changes to this list
Shootbin may add or replace a production subprocessor. Relevant changes can be communicated by email, an account notice, the website or this legal page. Customers can contact support@shootbin.com with a reasonable data-protection objection.