The Punisher LogoPunisherBack to Home

Subprocessors

Last updated: May 11, 2026

Operator

Operator: PunisherLabsES (V. B. Badiuc). Address: Spain, Málaga, San Andrés 5.

Contact: [email protected]

List

We may use the following subprocessors to provide the Service. This list may change as we improve the product.

Stripe
Purpose: Payment processing, checkout, billing portal
Data: Billing/contact details, subscription metadata, payment tokens (handled by Stripe)
Location: United States and/or other locations depending on Stripe configuration
Microsoft Azure AD / Microsoft Identity Platform
Purpose: Authentication (enterprise SSO)
Data: Identity claims and authentication data
Location: United States and/or EU depending on Microsoft tenant configuration
Figma API
Purpose: Fetch design data at the direction of the user/customer
Data: Figma file/design metadata and assets as authorized by the user
Location: As provided by Figma (may include United States)
Atlassian (Jira)
Purpose: Create and manage Jira issues from comparison results at the direction of the user
Data: Atlassian OAuth token (scoped read/write), Jira project/issue metadata as authorized by the user; no design asset content is stored by Atlassian beyond what the user explicitly submits to a Jira issue
Location: As provided by Atlassian (may include United States and/or Australia)
Brevo (Sendinblue SAS)
Purpose: Transactional and (consent-based) marketing email delivery / contact management
Data: Email address, name, and marketing-consent status. Marketing contacts are created only when the user has given explicit opt-in consent
Location: EU/EEA (France)
Usercentrics GmbH
Purpose: Cookie consent management platform (CMP) and prior-consent script blocking
Data: Consent signals/preferences (cookie consent records), anonymized IP for consent logging
Location: EU/EEA (Germany)
Google Analytics / Google Ads (Google Ireland Ltd.)
Purpose: Website analytics and conversion measurement (loaded only after consent)
Data: Device/usage analytics data, pseudonymous identifiers
Location: EU and United States

International Transfers

Some subprocessors may process data outside the European Economic Area (EEA), including in the United States. Where required, we aim to rely on appropriate safeguards (for example, Standard Contractual Clauses) and other measures consistent with applicable law.