Service providers
Last updated 29 September 2026 (sources checked 27 September 2026)
These providers help us run Wenvar. This page forms part of our Privacy Policy. It shows what information each provider receives from Wenvar, why, where the provider stores or processes it, and how long it keeps it where that matters. Each provider also uses its own service providers, listed on its own website.
Before a new provider starts receiving customer data, we tell customers (see our terms).
| Provider | What it receives, and why | Where | How long, and other notes |
|---|---|---|---|
| Supabase | Everything in the register, to host it: accounts and sign-in, projects, photos and their records. | Sydney: database, sign-in and photo storage are hosted in Amazon Web Services' Sydney region. Supabase uses Cloudflare's content delivery network in front of its service, and runs its processing functions in the region nearest the device calling them. | Keeps daily database backups for 7 days and service logs for 7 days. |
| Amazon Web Services | A copy of each original photo, in our own account, so photos can be recovered if the main storage fails. | Sydney | Each copy is deleted within 30 days after its photo is permanently deleted. |
| Vercel | Web traffic to this website and the register, including IP addresses, to run and deliver them. | The register's application runs in Sydney; pages are delivered through Vercel's global network. | Keeps application logs for 1 day. We have switched off Vercel's option to use our data for AI training. |
| Anthropic | Only in projects where the customer has switched AI captions on, and only for people who have allowed them: a copy of each photo they take or import after that choice (a preview, not the original file) and the project name, to suggest a caption, category and keywords; and, when a person importing photos into such a project asks for it, to read the date, time and address printed on an image. | Stores data in the United States. By default it may process data in selected locations in the United States, Europe, Asia and Australia, and elsewhere for safety review, support or incident response. | Deletes what its service receives and returns within 30 days, unless it must keep it longer by law or to enforce its usage policy; content its safety systems flag can be kept for up to 2 years. Does not use the content we send to train its models: its commercial terms do not allow it, and we have confirmed training is switched off in our account. |
| Apple | In the iPhone app, the photo's position and your phone's connection details, to look up the street address and draw the map on the stamp. Also App Store and TestFlight distribution of the app. | Apple says personal data is generally stored by Apple Inc. in the United States. | Apple's privacy policy applies. |
| OpenStreetMap Foundation | Coordinates, sent by our server, to look up the street address for the web camera. Map tile requests sent by your own browser for the register's map and the web camera's stamp map, which show it your IP address and the area you are viewing. | United Kingdom and the Netherlands, with backups in the EU; map tiles are served from a global network of cache servers. | The OpenStreetMap Foundation's privacy policy applies. |
| Resend | Recipients' email addresses and the contents of invitations, password resets and deletion confirmations, to deliver them. | United States | Keeps email and log data for 30 days. |
| Formspree | What you enter in this website's request-access form, the consent tick and any campaign tag (source, medium and campaign name), to deliver it to us. | United States | Keeps submissions for 30 days on our plan. |
| VentraIP | Emails and enquiries sent to our addresses, in our mailboxes; and our domain name records. | Australia | Emails stay in our mailboxes; see How long we keep it. |
Sources
Sources checked on 27 September 2026; our own account settings confirmed on 29 September 2026. Questions to legal@wenvar.com.au.
- Supabase: security, backups, function regions, plans and log retention.
- Amazon Web Services: our own account's configuration, in the Sydney region.
- Vercel: delivery network, log retention.
- Anthropic: locations, retention, training, commercial terms.
- Apple: privacy policy.
- OpenStreetMap Foundation: privacy policy, tile usage policy.
- Resend: data handling.
- Formspree: privacy policy, plans.
- VentraIP: Australian email and domain provider.