Subprocessors
Last updated: 2026-09-18
papershot (Wellbayt LLC-FZ, United Arab Emirates) engages the following subprocessors to deliver the service. Each is bound by a data processing agreement and, where EU, UK, Swiss or UAE law requires it, by the appropriate cross-border transfer mechanism (EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent). We give 30 days' notice before adding a new subprocessor that would have access to personal data.
| Name | Role | Region | Data | Policy |
|---|---|---|---|---|
| Amazon Web Services | Media storage (S3), delivery (CloudFront), database (RDS Postgres), key management (KMS), automated screening of thumbnails and video poster frames (Rekognition), transactional email (SES) | Ireland (eu-west-1) | All service data, encrypted at rest and in transit; thumbnails and poster frames for screening, never originals or audio; email addresses and message content for transactional and data-request email | Privacy |
| Apple | In-app purchases and App Store Server Notifications, Apple Push Notification service, Sign in with Apple | United States and European Union | Transaction identifiers and receipts; push and Live Activity tokens with notification content; Apple sign-in identifier, plus name and email where you share them | Privacy |
| Firebase Cloud Messaging (Android push), Google Play Billing, Google Sign-In, Firebase Analytics (Google Analytics 4) | United States and European Union | Android push tokens and notification content; Play purchase tokens; Google sign-in identifier, name and email; analytics events and user properties under a pseudonymous id, with a coarse location inferred from IP address | Privacy | |
| Sentry | Crash and performance monitoring | United States or European Union | Stack traces, device model, OS and app version, a pseudonymous user id; no email, username, IP address, screenshots, view hierarchy or session replay | Privacy |
| Stripe | Web payments and receipts | United States and European Union | Transaction metadata and payment receipt identifier; card data handled by Stripe | Privacy |
Last changed: 2026-09-18. Amazon SES (email), Amazon Rekognition (automated screening), Sentry (crash and performance monitoring) and Firebase Analytics were added; the previous email and crash-reporting providers were removed.
Subscribe to Changes
To receive notice of new subprocessors, email papershot@wellbayt.com with "Subprocessor notifications" in the subject line. Include the customer or domain you want notifications for.
Objecting to a New Subprocessor
To object to a new subprocessor, write to papershot@wellbayt.com within 30 days of notice with "Subprocessor objection" in the subject line. We will discuss it with you in good faith.