Vestry subprocessors
Draft 2026-10-26, US edition · Issued by FortyTwo Venture GmbH · Public at /subprocessors/. Last updated 26 October 2026.
The short version
Vestry is hosted in the United States (Google Cloud, Iowa). Our AI partners, OpenRouter and fal, pass the photo to the AI model that makes the try-on image (Google, OpenAI, xAI and Bria), in the United States, and for some models in other countries. They and see only the photo and the product image. None of them may train on your data, and they must delete photos within 24 hours, unless the law requires them to keep them. We give merchants 30 days' notice before adding or replacing a subprocessor.
| Subprocessor | What for | Data | Where | Transfer basis |
|---|---|---|---|---|
| Google Cloud (Google Cloud EMEA Ltd) | Hosting, database, photo storage | All app data | Iowa, United States | Swiss-US Data Privacy Framework (Google LLC); standard contractual clauses in Google's data processing terms as backup |
| OpenRouter (OpenRouter, Inc.) | Passes the try-on to the AI model and returns the image | Photo, product image, the shopper's styling hint | United States | Standard contractual clauses with the Swiss adaptation (OpenRouter's data processing agreement, 13.4) |
| fal (Features & Labels, Inc.) | Runs try-on models and holds the image until we copy it | Photo, product image, the shopper's styling hint | United States and other countries | Standard contractual clauses with the Swiss adaptation (fal's data processing addendum, 5.3) |
| OpenAI, through OpenRouter | Makes try-on images (the default model) | Photo, product image, styling hint | United States | Through our contract with OpenRouter |
| Google, through OpenRouter or fal | Makes try-on images | Photo, product image, styling hint | United States | Through our contract with OpenRouter or fal |
| xAI, through OpenRouter | Makes try-on images | Photo, product image, styling hint | United States | Through our contract with OpenRouter |
| Bria, through fal | Makes try-on images | Photo, product image, styling hint | United States and other countries | Through our contract with fal |
| Resend (Plus Five Five, Inc.) | Sends the code email, and merchants' spending warnings | Email address, code; for merchants, the warning's figures | United States | Standard contractual clauses recognized by the FDPIC (Resend's data processing agreement) |
| Discord (Discord Inc.) | Tells our team about merchant feedback in Studio | Store, rating, the merchant's comment. No images and no image links | United States | Swiss-US Data Privacy Framework (Discord Inc.) and standard contractual clauses |
| Google Analytics (Google Ireland Ltd) | Visits to our website, only with cookie consent | Pages visited, device, approximate location, cookie ID | United States | Swiss-US Data Privacy Framework (Google LLC) |
| PostHog (PostHog, Inc.) | Product and website analytics, only with cookie consent | Pages visited, clicks, device, approximate location, cookie ID | United States | Swiss-US Data Privacy Framework (PostHog Inc.) |
Where the data goes
Shoppers and merchants are in the United States, and their data is stored there. The photo and product image go to the AI model that makes the image, which can be outside the United States (the Where column). Vestry's company and team are in Switzerland, so Swiss law governs how we send data to our US partners; that is what the transfer basis column shows.
Google Cloud, our AI partners and email sending are needed to make the try-on image, send the code or run Studio: without them the service can't work. If you don't want them, don't use the fitting room (shoppers) or uninstall Vestry (merchants). Discord, Google Analytics and PostHog aren't needed to run the service; they get only merchant or website data, never shopper data.
| Data | Country | When and how | Recipient and contact | Purpose and how long | Safeguard |
|---|---|---|---|---|---|
| All app data | United States | Stored on Google Cloud in Iowa, encrypted in transit and at rest | Google Cloud EMEA Ltd, https://support.google.com/cloud/contact/dpo | Hosting; photos and images within 24 hours, the rest as in our privacy policy | Swiss-US Data Privacy Framework (Google LLC); standard contractual clauses in Google's data processing terms as backup |
| Photo, product image, styling hint | The model's country (above) | At each try-on, through OpenRouter or fal, encrypted in transit | The partner and model above: OpenRouter, privacy@openrouter.ai; fal, support@fal.ai | To make the try-on image; deleted within 24 hours | Standard contractual clauses with the Swiss adaptation, in OpenRouter's and fal's data processing agreements |
| Email address, code | United States | At each code email, encrypted in transit | Resend (Plus Five Five, Inc.), privacy@resend.com | To send the code; Resend keeps the message and its log for 30 days | Standard contractual clauses recognized by the FDPIC |
| Store, rating, the merchant's comment | United States | At each Studio feedback, encrypted in transit | Discord Inc., privacy@discord.com | To tell our team; kept until we delete the message | Swiss-US Data Privacy Framework (Discord Inc.) and standard contractual clauses |
| Website visit data | United States | At each website visit with cookie consent, encrypted in transit | Google Ireland Ltd, https://support.google.com/policies/contact/general_privacy_form | Website statistics; 14 months | Swiss-US Data Privacy Framework (Google LLC) |
| Website and app usage data | United States | At each visit with cookie consent, encrypted in transit | PostHog, Inc., privacy@posthog.com | Product and website analytics; 14 months | Swiss-US Data Privacy Framework (PostHog Inc.) |
How we check. Swiss law governs our transfers. We rely on the Swiss-US Data Privacy Framework only for a partner that is active on the official list (dataprivacyframework.gov), including the Swiss part. We check before first use and every year. Otherwise we use standard contractual clauses recognized by the FDPIC. OpenAI's contract is with OpenAI Ireland Ltd; OpenAI's own clauses cover the onward transfer to the United States.
Not a subprocessor: Shopify. It's the platform your store runs on, and it receives what the fitting room writes back to your store (email, marketing choice, product tags).