Legal
Subprocessors
The vendors Still Bureau uses to operate the Service, the categories of data they may process, and which provider-backed features are currently disabled.
- Effective
- Last updated
01About this list
A subprocessor is a vendor we engage to process personal information in order to run Still Bureau. Each one is bound by a written contract limiting it to our instructions, requiring appropriate security, and permitting the international transfer safeguards described in the Privacy Policy.
The list is split into core infrastructure, which every account uses,conditional processors, which receive data only when the related feature is enabled and used, and disabled providers that currently receive no customer data.
02Core infrastructure
Scroll horizontally to view all columns.
| Vendor | What it does | Data it may process | Region |
|---|---|---|---|
| Amazon Web Services | Application hosting, PostgreSQL database, media object storage, transactional and inbound email, and account authentication. | Account details, site and gallery content, original and derived media, studio records, orders, message content and delivery events, operational logs, private retained purchases, and the restricted transaction archive. | United States |
03Conditional processors and disabled providers
Conditional processors receive data only after the related feature is explicitly enabled and used. Disabled integrations receive no customer data from Still Bureau. Retained purchase delivery and the restricted financial archive use the core infrastructure above; they do not require reconnecting the closed studio's optional integrations.
Scroll horizontally to view all columns.
| Vendor | Enabled for | Data it may process |
|---|---|---|
| Stripe | Paid plans, add-ons, or a photographer's connected payment account where enabled and used; related refund and payment reconciliation can continue after studio closure. | Name, email address, billing address, payment method, subscription and charge history, refunds, and disputes. Card details go directly to Stripe rather than Still Bureau's servers. |
| Google Calendar | Calendar synchronization where enabled and explicitly connected by the account. | Calendar identifiers, busy-time intervals, and booking event details needed for the selected synchronization. |
| Google Analytics | Visitors to Still Bureau's own marketing pages who accept analytics, and visitors to a photographer's site who accept that site's banner. | Truncated IP address, page views, approximate geography, device and browser characteristics, and interaction events. Advertising features are disabled on our pages. |
Disabled integrations
Scroll horizontally to view all columns.
| Provider | Possible future purpose | Current status |
|---|---|---|
| Telnyx | Recipient phone number, message content, and delivery status if SMS is later enabled. | Disabled while business registration, sender verification, and acceptance are pending; no SMS is sent. |
| Prodigi | Order contents, print image, recipient name, and shipping address if automatic fulfillment is later enabled. | Disabled pending provider acceptance; no customer data is sent. |
| Browser and operating-system push services | A browser or device endpoint, encryption keys, delivery metadata, and an encrypted notification payload if web push is later enabled. | Disabled pending production keys and device acceptance; no customer data is sent. |
04Changes and objections
- We update this page before a new subprocessor begins processing customer data.
- Customers with a signed data processing agreement can request advance notice of additions by writing to hello@stillbureau.com.
- If you have a reasonable, documented objection to a new subprocessor on data-protection grounds, tell us within 30 days of the change. We will work with you on an alternative where one exists. If a paid subscription exists at that time and no alternative does, you may cancel the affected subscription and receive a pro-rated refund of the unused prepaid term.