Subprocessors
ShapeKit, Inc. uses the third-party providers below to help deliver and operate our service. Each processes personal data on our behalf under contract, only for the purposes described. Where these providers process EU/UK personal data outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses where applicable. Processing is primarily in the United States.
| Subprocessor | Purpose | What they process |
|---|---|---|
| Amazon Web Services (AWS) | Hosting & infrastructure — database, application and website hosting, transactional email, storage | Effectively all stored service data and email delivery metadata |
| Anthropic | AI model provider (reshape features) | AI prompt text, context, and generated output |
| OpenAI | AI model provider (reshape features) | AI prompt text, context, and generated output |
| PostHog | First-party product analytics | Usage events, device/browser metadata, account identifiers |
| Stripe | Payments, subscriptions, and marketplace payouts | Billing contact, payment status, transaction data |
| Authentication via “Sign in with Google” | OAuth identifier, email, basic profile | |
| Probo | Security & compliance evidence | Limited account and administrative metadata |
Changes to this list
When we add or replace a subprocessor, we will update this page and update the “Last updated” date above. Customers under a Data Processing Addendum receive advance notice of new subprocessors in line with that agreement and may object as provided there.
Questions: privacy@shapekit.ai.