Subprocessors
Snapbar uses a limited number of third-party service providers (subprocessors) to operate our platform and deliver experiences to event participants. This page lists the subprocessors that may process personal data on behalf of our customers in connection with Snapbar services.
Last updated: 05/01/2026
Maintained by: Snapbar
Notifications: privacy@snapbar.com
Core Platform
Services used across every Snapbar engagement to host our platform, store customer data, deliver media, send transactional email, and monitor reliability.
Supabase
Hosted database, authentication, file storage, and realtime API platform.
Location: United States
Data processed: Application data, submission and lead data, media records, analytics events.
Google Cloud Platform
Compute, task queues, secrets management, and logs and metrics for backend processing.
Location: United States
Data processed: AI processing data, operational telemetry, provider credentials.
Netlify
Hosting, CDN, and build and deploy for Snapbar web, booth, and gallery sites.
Location: United States
Data processed: HTTP request metadata, viewer IP and user-agent, site content, build artifacts.
Cloudinary
Media upload, storage, transformation, and CDN delivery.
Location: United States
Data processed: Captured photos and videos, generated outputs, branded assets, reference images.
Sentry
Error monitoring, exception tracking, and runtime telemetry.
Location: United States
Data processed: Operational telemetry, redacted request context, optional user identifiers when set.
Postmark (ActiveCampaign)
Transactional email delivery and engagement webhooks.
Location: United States
Data processed: Recipient addresses, subject and body content, delivery and engagement events.
Stripe
Billing, checkout, subscriptions, invoicing, and payment processing.
Location: United States
Data processed: Customer email, account IDs, subscription and invoice metadata. Payment method data handled directly by Stripe.
Cloudflare Turnstile
CAPTCHA and bot protection.
Location: United States
Data processed: CAPTCHA tokens, browser, device, and network metadata handled by Cloudflare.
AI & Media Processing
Services that process captured media, prompts, and generated outputs when an experience uses AI generation, image enhancement, or background removal. See the note on AI processing below.
OpenAI
AI image generation and editing, plus redacted aggregate text analysis for analytics.
Location: United States
Data processed: Prompts, source and reference images, generated outputs.
Replicate
AI image and video prediction API. Replicate may route requests to its catalog of hosted model providers.
Location: United States
Data processed: Prompts, source media URLs, reference images, generated outputs, webhook payloads.
Astria
AI image generation and tuning prompt API.
Location: Israel
Data processed: Prompts, source images, masks and references, generated outputs.
Luma AI
AI video generation API.
Location: United States
Data processed: Video prompts, generation parameters, generated video outputs.
Topaz Labs
Image enhancement and upscaling API.
Location: United States
Data processed: Source images, enhanced output images.
remove.bg (Kaleido AI / Canva)
Background removal API.
Location: Austria
Data processed: Source images, background-removed output images.
Optional Integrations
Services activated only when a customer enables a specific feature, integration, or environment configuration for their experience. Not used by default.
Mosaically
Photo mosaic upload and render. Used only when the Mosaically integration is enabled on a specific experience.
Location: United States
Data processed: Generated image URLs, mosaic IDs, upload and render metadata.
Walls.io
Social wall media upload and post creation. Used only when the Walls.io integration is enabled on a specific experience.
Location: Austria
Data processed: Generated image and video files, media IDs, post metadata.
Clearbit (HubSpot)
Company-domain enrichment for analytics. Used only when domain enrichment is enabled. Personal email domains are filtered out before requests.
Location: United States
Data processed: Company email domains, cached enrichment metadata.
Lemon Squeezy
Alternative billing provider. Used only when an account is configured to use Lemon Squeezy in place of Stripe.
Location: United States
Data processed: Customer email, account IDs, subscription and invoice metadata.
Resend
Alternative transactional email provider. Used only when an account is configured to use Resend in place of Postmark.
Location: United States
Data processed: Recipient addresses, subject and body content, delivery events.
Google Fonts
Client-side font asset delivery. Loaded directly by the viewer's browser when a Google-hosted font is selected for an experience.
Location: United States
Data processed: Viewer browser request metadata, IP address, user-agent, referrer.
A note on AI processing
Snapbar experiences may capture photos and videos that include personal likeness, names, email addresses, or other custom fields. When AI generation, enhancement, or background removal is part of an experience, these inputs are transmitted to the AI subprocessors listed above solely to generate the outputs requested by the customer or participant. Snapbar does not use customer or participant content to train AI or large language models, and our AI subprocessors are contractually prohibited from doing so. Snapbar does not extract, store, or use biometric identifiers from captured media.
Changes & Notification
We update this page when we add, replace, or remove a subprocessor. Customers under an active Data Processing Agreement with Snapbar can subscribe to email notifications by writing to privacy@thesnapbar.com. Where required by an executed DPA, Snapbar provides fifteen (15) business days' advance notice of changes and a right to object.
Questions about this page or Snapbar's data practices? Contact privacy@thesnapbar.com.
Information about how Snapbar handles personal data is available in our Privacy Policy and Terms of Use.