The Punisher LogoPunisherBack to Home

Subprocessors

Last updated: May 11, 2026

Operator

Operator: PunisherLabsES (V. B. Badiuc). Address: Spain, Málaga, San Andrés 5.

Contact: [email protected]

List

We may use the following subprocessors to provide the Service. This list may change as we improve the product.

Stripe
Purpose: Payment processing, checkout, billing portal
Data: Billing/contact details, subscription metadata, payment tokens (handled by Stripe)
Location: United States and/or other locations depending on Stripe configuration
Microsoft Azure AD / Microsoft Identity Platform
Purpose: Authentication (enterprise SSO)
Data: Identity claims and authentication data
Location: United States and/or EU depending on Microsoft tenant configuration
Figma API
Purpose: Fetch only the frame selected when the user explicitly triggers Capture
Data: The selected Figma frame and its associated file key and file name; no unselected design content
Location: As provided by Figma (may include United States)
Atlassian (Jira)
Purpose: Submit a user-requested bug or ticket from comparison results
Data: A scoped Atlassian OAuth token and the outgoing ticket details. We do not retrieve or read Jira project contents, existing issues, user content, or other sensitive Jira data
Location: As provided by Atlassian (may include United States and/or Australia)
Brevo (Sendinblue SAS)
Purpose: Transactional and (consent-based) marketing email delivery / contact management
Data: Email address, name, and marketing-consent status. Marketing contacts are created only when the user has given explicit opt-in consent
Location: EU/EEA (France)
Usercentrics GmbH
Purpose: Cookie consent management platform (CMP) and prior-consent script blocking
Data: Consent signals/preferences (cookie consent records), anonymized IP for consent logging
Location: EU/EEA (Germany)
Google Analytics / Google Ads (Google Ireland Ltd.)
Purpose: Website analytics and conversion measurement (loaded only after consent)
Data: Device/usage analytics data, pseudonymous identifiers
Location: EU and United States

International Transfers

Some subprocessors may process data outside the European Economic Area (EEA), including in the United States. Where required, we aim to rely on appropriate safeguards (for example, Standard Contractual Clauses) and other measures consistent with applicable law.