Sub-processors
Last updated: March 24, 2026
Jenro uses the following third-party sub-processors to deliver the service. We will update this page and notify customers via email at least 14 days before engaging a new sub-processor, as described in our Data Processing Agreement.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, row-level security | US (AWS us-east-1) |
| Vercel | Application hosting, serverless functions, CDN | US / Global Edge |
| Stripe | Payment processing, subscription billing | US |
| Anthropic (Claude API) | AI analysis — fit scoring, brand profiling, sentiment analysis, visual assessment | US |
| Google (Places API) | Public business data — ratings, reviews, photos, business types | US / Global |
| Upstash | Rate limiting (Redis) | US (AWS) |
Data Processing Notes
AI Processing (Anthropic)
Text and image data sent to Anthropic's Claude API for analysis (fit scoring, brand profiling, review sentiment, visual assessment) is processed under Anthropic's commercial API terms. Data sent via the API is not used for model training. We send only publicly available business information and your brand profile data — never individual personal data.
Payment Processing (Stripe)
Stripe processes payment card data directly. Jenro never receives, stores, or has access to your full card number. Stripe is PCI-DSS Level 1 certified.
Public Business Data (Google)
Google Places API provides publicly available business information (ratings, reviews, photos, business types). This data relates to business entities, not private individuals, and is used to enrich retailer profiles.
Change Notification
If we add a new sub-processor, we will update this page and send email notification to all active account holders at least 14 days in advance. If you object to a new sub-processor, you may terminate your account within the notice period as described in the DPA.
Questions about our sub-processors? Contact privacy@jenro.co.