QR Code AI Subprocessors
A transparent list of all third-party services that process data on behalf of QR Code AI. Updated whenever a subprocessor is added or removed.
SUBPROCESSORS
Last updated 2 March 2026
This page lists all third-party subprocessors that QR Code AI (operated by SuperNovae) engages to process personal data on behalf of our customers. This list is maintained in accordance with our Data Processing Agreement and Privacy Policy.
We update this page whenever a subprocessor is added or removed. We recommend bookmarking this page and checking it periodically.
Infrastructure and Hosting
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Scaleway | Primary infrastructure hosting, databases, storage | All customer data, QR code assets, account data | France (EU) |
| DigitalOcean | Secondary infrastructure hosting | Customer data, QR code assets | Netherlands (EU) |
| Cloudflare | CDN, DDoS protection, DNS, WAF | IP addresses, request metadata, cached assets | Global (US-headquartered) |
| AWS (Amazon Web Services) | Cloud services, storage | QR code assets, processed data | EU/US |
| Google Firebase | Push notifications, cloud messaging, app services | Device tokens, user identifiers | US/EU |
AI and Content Generation
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Anthropic | AI-powered artistic QR code generation | Text prompts, uploaded images | US |
| OpenAI | AI-powered artistic QR code generation | Text prompts, uploaded images | US |
| Replicate | AI model hosting and inference for QR code generation | Text prompts, uploaded images | US |
Note: Your prompts and images are sent to these providers for processing only. They are not used to train AI models. All providers are bound by data processing agreements that prohibit use of customer data for model training.
Payments
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing, subscription management, invoicing | Payment card details, billing address, email, transaction history | US/EU |
Stripe handles all payment card data directly. QR Code AI does not store credit card numbers on its own servers. See Stripe's privacy policy at https://stripe.com/privacy.
Analytics
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Microsoft Clarity | Behavioural analytics, heatmaps, session replays | Anonymised interaction data (clicks, scrolls, mouse movements), device info, IP address (anonymised) | US |
Clarity data is anonymised and does not identify individual users. See Clarity's terms at https://clarity.microsoft.com/terms.
Customer Support
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Crisp | Live chat, customer support messaging, help centre | Name, email, chat messages, device info | EU |
Affiliate Programme
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Rewardful | Affiliate programme management, commission tracking | Affiliate name, email, referral data, commission amounts | US |
Changes to This List
We notify customers of changes to this subprocessor list by updating this page. If you have an active DPA with us and object to a new subprocessor, please contact us at [email protected] within 30 days of the update.
For questions about our subprocessors or data processing practices, contact us at [email protected].