Data Processing

This page describes how Organr processes data and which sub-processors are used.

Supabase (Supabase Inc., USA — database, authentication, and file storage. Data is stored in the EU region eu-central-1). Google Cloud (Google LLC, USA — Gemini AI is used for image analysis in Fridgr, Recipr, and Pantr. Images are processed and deleted immediately after analysis). Vercel (Vercel Inc., USA — hosting, CDN, and edge functions for all Organr apps and website).

For data transfers to the USA, EU Standard Contractual Clauses (SCC) are used as the legal basis, in accordance with GDPR Chapter V.

User data is stored in the Supabase database (EU). AI requests are sent to Google Gemini via Supabase Edge Functions — only image data and text are sent, no personally identifiable information. Static web pages are served via Vercel CDN.

Encrypted transmission (TLS/HTTPS), Row Level Security in the database, PIN-based authentication, and two-factor authentication for admin access.