Legal
Sub-processors
Last updated: 25 September 2026
Running MithoLens means relying on other companies for hosting, storage, payments and image generation. This page lists them, what each one handles, and where your information may be processed. It accompanies our Privacy Policy, which explains your rights and how to exercise them.
Infrastructure and service providers
Each provider below receives only the information it needs for the role described, and is bound by its own data processing terms.
Supabase
United States, Singapore
Account authentication, and the database holding your account details, credit balance and generation history. Runs on Amazon Web Services infrastructure.
Cloudflare
United States, and other locations on Cloudflare’s global network
Storage for the photos you upload and the images we generate (R2), served to you through time-limited private links.
Vercel
United States
Hosting and delivery of the website, including the request path your uploads travel through on their way to our server.
Railway
United States
Hosting for our application server, which processes uploads, generation requests and account operations.
Stripe
United States
Payment processing for credit purchases. Card details are entered directly with Stripe and never reach our servers.
Resend
United States
Sending transactional email — address verification, password resets and account notices.
Upstash
United States
Short-lived rate-limiting records used to prevent abuse of the service.
AI and image-generation providers
We use third-party artificial intelligence and image-generation service providers to process prompts, images and other content submitted by users for the purpose of providing our image-generation services.
Content is sent to these providers as API requests under paid commercial terms which provide that it is not used to train their models. These providers process content on infrastructure located in the United States.
We may change or add AI providers as the technology develops. Whichever provider is in use, the protections described above and in our Privacy Policy continue to apply.
Processing outside Australia
MithoLens is an Australian business, but the providers above operate outside Australia, so your information is processed overseas. The countries listed are where each provider is likely to process it; where a provider runs a global network, processing may occur in other countries on that network.
Before disclosing personal information overseas we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to that information, including relying on the provider’s data processing terms.
Changes to this list
We update this page when we add, remove or replace a provider, and change the date at the top when we do. If you have a question about a provider on this list, or about where your information is processed, contact us at contact@mitholens.com.