Pixelift Sp. z o.o. (administrator danych) korzysta z usług podmiotów trzecich w celu świadczenia Usługi. Zgodnie z RODO art. 28(2) i naszymi zobowiązaniami w Polityce Prywatności, poniżej znajduje się pełna, aktualna lista takich podmiotów wraz z ich rolą, lokalizacją przetwarzania oraz statusem DPA (Data Processing Agreement).
Powiadamiamy zarejestrowanych Użytkowników emailem co najmniej 30 dni przed dodaniem lub zmianą subprocessora. Historia zmian jest publicznie versioned w naszym repozytorium git.
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
Hetzner Online GmbH Hetzner Online GmbH (Germany) | Hosting (server, PostgreSQL, Redis) EU/EEA-only data residency. ISO 27001 certified. | EU Nuremberg, Germany | DPA podpisane ↗ Dodano: 2026-01-15 |
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
Stripe Stripe Payments Europe Ltd. (Ireland) for EU users | Payment processing, subscription management, tax invoicing EU SCCs included. PCI DSS Level 1. | US/EU EU traffic routed via Stripe Ireland | DPA podpisane ↗ Dodano: 2026-01-15 |
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
OpenAI OpenAI LLC (USA) | OpenAI Moderation API (prompt screening), GPT chat/agent, optional image generation API tier — opt-out of training (default). EU SCCs included. | US | DPA podpisane ↗ Dodano: 2026-01-15 |
Replicate Replicate Inc. (USA) | AI model API: image generation (FLUX, Recraft, Ideogram, SDXL), image enhancement (AuraSR, DDColor, GFPGAN), video restoration (DeOldify video colorize, GFPGAN video face restore, Whisper captions). Uploaded images and video files are sent to Replicate for processing. DPA available on request. Predictions deleted after 1 hour. Training opt-out enabled on Pixelift API account. Sprint Video Restoration 2026-05-27: scope expanded to include video files (max 50MB, MP4/WebM/MOV) for colorize and face-restore tools. | US | DPA podpisane ↗ Dodano: 2026-01-15 |
fal.ai Features Labs Inc. (USA) | AI model API (Sora 2, Kling Avatar v2 Pro, OmniHuman 1.5, Seedance 2.0, etc.) F0b Day 5 added. DPA verification pending. | US | DPA w toku ↗ Dodano: 2026-04-30 |
PiAPI PiAPI (USA/HK) | Kling 2.5 video generation API F0b Day 5 added. DPA + EU SCCs request pending. | US | DPA w toku ↗ Dodano: 2026-04-30 |
GoAPI GoAPI (USA) | Suno music generation API F0b Day 5 added. DPA + EU SCCs request pending. | US | DPA w toku ↗ Dodano: 2026-04-30 |
ElevenLabs ElevenLabs Inc. (USA) | Premium Polish TTS (Multilingual v2) F0a Day 3 confirmed PL premium voice. EU SCCs in DPA. | US | Potwierdzone przez Terms ↗ Dodano: 2026-04-30 |
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
AWS Rekognition Amazon Web Services EMEA SARL (Luxembourg) | NSFW / violence / hate symbol detection in generated images F0b Day 4 added. EU-only data residency configured. | EU eu-central-1 (Frankfurt, Germany) | DPA w toku ↗ Dodano: 2026-04-30 |
Microsoft PhotoDNA Microsoft Corporation (USA) | CSAM hash matching against NCMEC database Free for legitimate platforms. Application pending (~2-3 weeks approval). | US | DPA w toku ↗ Dodano: 2026-04-30 |
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
Resend Recursive Inc. (USA) | Transactional email delivery EU SCCs included. | US | DPA podpisane ↗ Dodano: 2026-01-15 |
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
PostHog PostHog Inc. (USA, EU host available) | Product analytics (events, page views) — consent-gated Will switch to eu.posthog.com host before V1.0 launch. | US/EU EU host (eu.posthog.com) — pending switch | DPA w toku ↗ Dodano: 2026-01-15 |
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
Sentry Functional Software Inc. (USA) | Error tracking and performance monitoring EU SCCs included. PII scrubbing enabled. | US | DPA podpisane ↗ Dodano: 2026-01-15 |
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
Cloudflare Cloudflare Inc. (USA) | DNS management (currently via home.pl, Cloudflare planned for V1.1+ CDN) EU SCCs included. Currently DNS only — no PII traffic. | Global EU edge nodes used for EU traffic | Potwierdzone przez Terms ↗ Dodano: 2026-04-30 |
| Podmiot | Cel przetwarzania | Region | DPA |
|---|---|---|---|
GitHub GitHub Inc. / Microsoft Corporation (USA) | Source code repository (no end-user PII) No end-user data stored. Code-only. | US | Potwierdzone przez Terms ↗ Dodano: 2026-01-15 |
Otrzymuj email co najmniej 30 dni przed dodaniem lub zmianą subprocessora.
Zarejestrowani użytkownicy otrzymują powiadomienia automatycznie. Niezarejestrowani — dopisz się do newslettera wybierając kategorię "Subprocessor changes".
Pytania dotyczące przetwarzania danych: legal@pixelift.pl
Zobacz również: Polityka Prywatności · Regulamin