The Punisher LogoPunisherBack to Home

Subprocessors

Last updated: May 11, 2026

Operator

Operator: PunisherLabsES (V. B. Badiuc). Address: Spain, Málaga, San Andrés 5.

Contact: [email protected]

List

We may use the following subprocessors to provide the Service. This list may change as we improve the product.

Stripe
Purpose: Payment processing, checkout, billing portal
Data: Billing/contact details, subscription metadata, payment tokens (handled by Stripe)
Location: United States and/or other locations depending on Stripe configuration
Microsoft Azure AD / Microsoft Identity Platform
Purpose: Authentication (enterprise SSO)
Data: Identity claims and authentication data
Location: United States and/or EU depending on Microsoft tenant configuration
Figma API
Purpose: Fetch design data at the direction of the user/customer
Data: Figma file/design metadata and assets as authorized by the user
Location: As provided by Figma (may include United States)
Atlassian (Jira)
Purpose: Create and manage Jira issues from comparison results at the direction of the user
Data: Atlassian OAuth token (scoped read/write), Jira project/issue metadata as authorized by the user; no design asset content is stored by Atlassian beyond what the user explicitly submits to a Jira issue
Location: As provided by Atlassian (may include United States and/or Australia)
Usercentrics GmbH
Purpose: Cookie consent management (CMP) — legacy / transitional use
Data: Consent signals/preferences (cookie consent records)
Location: EU/EEA (Germany)
Google Analytics
Purpose: Website analytics (only after consent where required)
Data: Device/usage analytics data
Location: United States and/or other locations

International Transfers

Some subprocessors may process data outside the European Economic Area (EEA), including in the United States. Where required, we aim to rely on appropriate safeguards (for example, Standard Contractual Clauses) and other measures consistent with applicable law.