Subprocessors
Last updated
Who processes what
Sign-in (OAuth). The only way to create a JustShot account.
- Receives
- Your email address and a Google user identifier. Google receives no files.
- Processed in
- Global
Account records and the database holding file details.
- Receives
- Email address, plan, storage totals, filenames, tags, link settings.
- Processed in
- Tokyo, Japan (ap-northeast-1)
Runs the API, stores uploaded files (R2), and serves every share link.
- Receives
- Uploaded files and thumbnails; IP addresses in transit, as any network provider handles.
- Processed in
- Global edge network; objects stored in an automatic region
Hosts the website and the dashboard.
- Receives
- Request metadata only. No files and no database access.
- Processed in
- Global edge network
Payments. Merchant of record for every purchase.
- Receives
- Name, email, billing address and card details — collected by them, never by us.
- Processed in
- United States
Delivers the two service emails we send.
- Receives
- Your email address and the content of that message.
- Processed in
- United States
What is not on this list
There is no analytics provider, no advertising network, no error-tracking service, no support-desk tool, and no marketing platform - because we do not use any. If that changes, this page changes first.
We never sell your data, and we never share it with anyone outside this list except where the law requires it.
Changes
Before adding a subprocessor that handles personal data, we update this page. If you would like to be told in advance rather than checking, email contact@justshot.net and we will add you to the notice list - it is a plain email, not a subscription.
Data processing terms
If your organisation needs a data processing agreement before using JustShot Cloud, write to contact@justshot.net and we will sort one out.