Providers that support the Pallex platform, what they process and where.
Pallex Pty Ltd / Last updated:
Platform providers
These providers process information on Pallex’s behalf to deliver the service. Their involvement depends on the features enabled and the service configuration.
Supabase
Database hosting and authentication
Information processed
Account and authentication information, extracted manifest records and audit records.
Processing locations
Primary database storage in Sydney, Australia. Other processing may occur internationally under Supabase’s data processing terms.
Application requests and submitted information, including manifest uploads handled by the application, plus technical request and diagnostic information.
Processing locations
Global delivery network. Application processing depends on the configured deployment regions; this is not an Australia-only service.
Manifest images, extraction instructions and extracted text. The Google service used depends on the application configuration.
Processing locations
International processing. Gemini API data may be processed wherever Google or its agents maintain facilities. Vertex AI locations depend on the endpoint and model; a global endpoint permits worldwide processing.
Recipient email addresses and message contents, such as account invitations and service notifications, together with delivery information.
Processing locations
Customer-data storage and primary processing in the United States. Email sending may use a selected sending region; this does not change the data-storage location.
Where Stripe billing is enabled, Stripe receives billing identifiers and scan usage information to support billing and payments. Stripe may act as a processor or an independent controller, depending on the activity. Processing may occur internationally, including in the United States and India, as described in its provider terms.
Primary storage and processing locations are not always the same. A database hosted in Australia does not mean that all supporting services process information only in Australia. The descriptions above summarise the services used; they are not an exhaustive list of every country involved.
Any specific data residency or retention commitments are set out in your agreement with Pallex. Provider links explain the terms that apply to each service.
KEEPING YOU INFORMED
Changes to this register
Pallex will notify customers by email before changes to its subprocessor list take effect, in accordance with their agreement. Notices are sent to the customer’s nominated contact. Any agreed notice periods and objection rights remain governed by that agreement.
If you have questions or concerns about a provider or a proposed change, reply to the notice or contact privacy@pallex.com.au.
This register does not vary your agreement with Pallex.