Subprocessors
Last updated: December 29, 2025
Operator
Operator: PunisherLabsES (V. B. Badiuc). Address: Spain, Málaga, San Andrés 5.
Contact: [email protected]
List
We may use the following subprocessors to provide the Service. This list may change as we improve the product.
Stripe
Purpose: Payment processing, checkout, billing portal
Data: Billing/contact details, subscription metadata, payment tokens (handled by Stripe)
Location: United States and/or other locations depending on Stripe configuration
Microsoft Azure AD / Microsoft Identity Platform
Purpose: Authentication (enterprise SSO)
Data: Identity claims and authentication data
Location: United States and/or EU depending on Microsoft tenant configuration
Figma API
Purpose: Fetch design data at the direction of the user/customer
Data: Figma file/design metadata and assets as authorized by the user
Location: As provided by Figma (may include United States)
Usercentrics CMP
Purpose: Cookie consent management and cookie blocking
Data: Consent signals/preferences (cookie consent records)
Location: EU/EEA (typical), depending on configuration
Google Analytics
Purpose: Website analytics (only after consent where required)
Data: Device/usage analytics data
Location: United States and/or other locations
International Transfers
Some subprocessors may process data outside the European Economic Area (EEA), including in the United States. Where required, we aim to rely on appropriate safeguards (for example, Standard Contractual Clauses) and other measures consistent with applicable law.