Legal
Subprocessors
Last updated 8 June 2026. These are the third parties that process data on our behalf to run Vitryne. Each is bound by a data-processing agreement. Your account, catalogue and documents are stored in the EU; AI extraction providers may process an uploaded file outside the EU for the duration of the extraction (see our privacy policy).
Supabase
Authentication, database, file storage (uploaded PDFs + images)
Name, email, organisation, uploaded documents, catalogue data
Switzerland (Zurich)
Vercel
Application hosting / compute
Request + operational logs
EU (fra1)
Google (Gemini API)
AI extraction of uploaded preview PDFs
The uploaded PDF and page images (artist, title, prices, notes)
Outside the EU (incl. United States); no-training API terms
Anthropic (Claude API)
AI extraction fallback when the primary provider declines
The uploaded PDF
Outside the EU (incl. United States); no-training API terms
Stripe
Payments and subscription billing
Email, organisation name, billing details (card data held by Stripe)
United States / global (PCI-compliant)
Resend
Transactional email (sign-in, invitations)
Recipient email and name
EU / United States
PostHog
Product analytics (only after cookie consent)
Pseudonymous user id, organisation id, usage events
EU
We update this list as our providers change. Questions: contact@geibo.ch.