Sub-processors
Last updated:
Vintique uses a small number of vetted third-party service providers ("sub-processors") to operate the Service. Each is bound by a written data-processing agreement, processes data only on our documented instructions, and is held to security standards consistent with our own. This page is referenced from our Privacy Policy and is updated whenever we add or change a sub-processor.
Current sub-processors
| Sub-processor | Purpose | Data shared | Processing location |
|---|---|---|---|
| Stripe, Inc. | Subscription billing, payment-method storage, billing portal. | Mall name, billing email, billing address, last4/brand of card on file, customer and subscription identifiers, invoice history. Full card numbers are collected and stored by Stripe; Vintique never sees them. | United States |
| SendGrid (Twilio) | Transactional email delivery (welcome, password reset, billing receipts, daily vendor digests, support replies). | Recipient email address, sender, subject, message body, message metadata (timestamps, message identifiers, delivery status). | United States |
| Replit Object Storage | Object storage for saved item photos and other uploaded files. Uploads use short-lived presigned URLs scoped to a tenant-prefixed path. | Saved item photos and any files an authorized user uploads to a Workspace. Files are stored under a tenant-prefixed path so a tenant cannot read or overwrite another tenant's objects. | United States |
| Replit (hosting & managed PostgreSQL) | Application hosting, managed PostgreSQL database, runtime infrastructure. | All Customer Data stored in the Service database (Workspace records, transactions, vendor profiles, gift card balances, audit logs, etc.) and application logs. | United States |
| SerpAPI, Inc. (incl. Google Lens, Google Shopping, eBay results) | Item-lookup and comparable-listing search results for the in-app and Extension Price Lookup feature. | The image bytes or image URL and text query you submit for a single lookup. EXIF metadata is stripped from photo uploads before they leave Vintique. Lookup photos themselves are processed in-memory only and are not persisted by Vintique once the search completes; the resulting comparable-listing data is cached briefly (see Privacy Policy §7) so the same search can be reused across the mall. SerpAPI does not receive your Workspace or user identifier. | United States |
Image lookups and the Google Lens / SerpAPI sub-processor
Photos you submit through the in-app or Extension Price Lookup feature are forwarded to our image-search sub-processor (SerpAPI, which in turn relays the query to Google Lens, Google Shopping, and eBay) so we can return comparable listings and a suggested price range. Before any lookup photo leaves Vintique, EXIF metadata (including camera make/model and any embedded GPS coordinates) is stripped. The lookup photo itself is ephemeral on Vintique's side: it is processed in memory for the duration of the search and is not stored in our database or object storage. Only the resulting comparable-listing data is cached briefly (see the Retention section of the Privacy Policy). Photos you choose to save to a Workspace as item photos are stored in our object storage and follow the saved-photo retention rules in the Privacy Policy.
Vintique does not perform facial recognition or any other biometric processing on uploaded photos and does not instruct any sub-processor to do so. Do not upload photos containing identifiable people, minors, government identification, or any other content that would trigger biometric-privacy laws (for example Illinois BIPA).
Notification of changes
When we add a new sub-processor or materially change how an existing sub-processor is used, we will update this page and bump the "Last updated" date above. For Customers on plans that include a written data-processing agreement, we will also provide notice by email to the Workspace's billing contact at least 14 days before the change takes effect, where reasonably practicable.
Questions or objections
To raise a question or formal objection about a sub-processor, reply to any email we have sent you or contact us through the Settings page in your Workspace.