Subprocessors

Why this list exists

Running an AI service means sending your data to companies other than us. There is no way to generate an image from your photograph without the photograph reaching the model that processes it. We would rather name them than describe them vaguely as 'trusted partners'.

Each provider below acts as our processor: it handles your data on our instructions, under a data processing agreement, and may not use it for its own purposes. We keep the list current when we change providers.

Storage and hosting

• Amazon Web Services (Amazon S3): United States, region us-west-2 (Oregon). Stores every photograph you upload and every pattern file we generate, in a private bucket served through short-lived signed links.

AI processing

These are the providers that receive your photograph or your prompt. They are the ones most people want named, so they are described in more detail.

• fal.ai: United States. Generates images from your text prompts and turns your photographs into coloring pages. It receives the prompt text, and/or the source image. fal.ai applies its own automated safety filter, which is why an innocent prompt is occasionally refused.

Payments, email and sign-in

• Stripe: United States and Ireland. Processes payments and subscriptions. Receives your email address, billing details and the card data you enter on Stripe's own checkout page; that card data never passes through our servers.
• Resend: United States. Delivers transactional email: address verification, password resets and notices about your account. Receives your email address and the content of those messages, and sends them through Amazon Web Services' email service.
• Cloudflare: United States. Receives email sent to our addresses and forwards it to our mailbox. It handles your message only if you write to us.
• Google: used only if you choose to sign in with Google. We receive your email address and basic profile details from Google; we send Google nothing about what you do on Artwello.

Support chat

Crisp IM SAS: France. Runs the chat window in the corner of our pages. Its servers are in the European Union: messages in the Netherlands, everything else in Germany. Nothing is sent to Crisp, and nothing is stored in your browser, until you open the chat and write to us.

When you do, Crisp receives your messages and anything you attach to them. If you are signed in we also pass your email address, display name, plan and credit balance, so that whoever answers is not asking you questions we already know the answer to. Crisp keeps the IP address a conversation was started from. We never send it your photographs or your patterns.

Conversations stay in our inbox until we delete them. Ask us and we will remove yours along with the contact profile behind it.

Error monitoring

Sentry (Functional Software, Inc.): United States. When something breaks in the app or on our servers, it receives a technical report of the error: what failed, on which page or request, and the browser and device type. We do not attach your images, your prompts or your account details to these reports. It stores nothing in your browser.

Analytics

Umami: hosted in the European Union. Counts page views and visits so we know which pages people use. It works without cookies and stores nothing in your browser, does not build a profile of you, and does not follow you to other websites. It receives the page address, the referring site, your browser and device type, and an approximate country, never your images or prompts.

We do not use Google Analytics. If we ever do, it will load only after you accept it in a cookie banner, and it will appear on this page first. See our Cookie Policy.

Training and retention at our providers

We do not train AI models on your images or prompts, and we do not grant anyone a licence to do so. We select providers whose terms match that position for API traffic, and our agreements with them are on that basis.

What we cannot do is control another company's internal logging. Providers keep operational records for their own security, abuse-prevention and billing purposes, for periods set in their own policies. If this matters to your use of the service, read the provider's own terms before uploading, and remember that generating from a text prompt sends no photograph of yours anywhere.

International transfers

Several providers above are in the United States, so using Artwello involves transferring your data outside the European Economic Area. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

Our support chat is the exception: Crisp stores its data inside the European Union, so nothing you write to us in the chat leaves the EEA.

Changes to this list

We update this page when we add or replace a provider. If you would like to be told in advance of changes, write to [email protected] and we will notify you by email.