Legal

Subprocessors

Proova uses the third-party services listed below to deliver the platform. Each subprocessor is contractually bound to handle data securely and in accordance with applicable law.

Last updated: September 30, 2026

SupabaseUnited States

Database, authentication, and file storage

Stores all application data (tenant records, case metadata, photos) and handles user authentication, including password-reset emails.

VercelUnited States

Application hosting and CDN

Hosts the Proova web application and serves the embeddable gallery script to end users.

UpstashUnited States

Rate limiting and caching

Redis-based rate limiting and short-lived caching. Holds IP addresses and account IDs in rate-limit counters (expire within an hour), and cached gallery data for published cases, including time-limited links to their photos (expire within 48 hours).

ResendUnited States

Transactional email

Sends account emails: welcome and email confirmation, upgrade confirmations, deletion notices, and the weekly gallery summary.

StripeUnited States

Payment processing and billing

Processes subscription payments and manages billing. Proova does not store payment card data.

For questions about data processing, contact us at hello@proova.io.