Subprocessors

VITRINA is operated from Latvia (EU). To run the service we rely on the third-party processors below, each acting on our documented instructions under a data processing agreement. We will give notice before adding or replacing a subprocessor that handles personal data.

Authentication, Postgres database, and file storage. Holds your account (email), generation records, and uploaded/generated images. Hosted in the EU (eu-central-1).

Managed AI image-model gateway. Receives your source image and prompt to run the generation model; outputs return to our storage. Processing may occur outside the EU under appropriate safeguards (Standard Contractual Clauses).

Merchant of record. Polar is the legal seller for every order: it collects your billing details and payment data, issues the invoice, processes refunds, and remits applicable VAT and sales taxes. We never see or store card numbers. Polar processes payments through its own regulated payment partners.

Application hosting and edge delivery. Processes request metadata (IP address, headers) to serve the app and apply security controls.

Redis used for rate limiting and abuse prevention. Stores short-lived keys derived from account id / IP address. No image or account content.

Error and performance monitoring. Receives diagnostic event data (pseudonymous account id, event metadata, error messages) — not your images, emails, or payment data.

CAPTCHA on sign-up to stop automated abuse. Processes a challenge token and request metadata at registration time.

When enabled, content moderation and product classification. Receives the text description and/or image for safety screening. Not used for advertising or model training on your data.